Jul 14 21:56:25.720022 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Jul 14 21:56:25.720040 kernel: Linux version 5.15.187-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Jul 14 20:49:56 -00 2025 Jul 14 21:56:25.720048 kernel: efi: EFI v2.70 by EDK II Jul 14 21:56:25.720054 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Jul 14 21:56:25.720059 kernel: random: crng init done Jul 14 21:56:25.720064 kernel: ACPI: Early table checksum verification disabled Jul 14 21:56:25.720070 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Jul 14 21:56:25.720077 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Jul 14 21:56:25.720083 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 21:56:25.720088 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 21:56:25.720094 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 21:56:25.720099 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 21:56:25.720104 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 21:56:25.720110 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 21:56:25.720118 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 21:56:25.720124 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 21:56:25.720148 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 21:56:25.720155 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Jul 14 21:56:25.720161 kernel: NUMA: Failed to initialise from firmware Jul 14 21:56:25.720167 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Jul 14 21:56:25.720172 kernel: NUMA: NODE_DATA [mem 0xdcb0b900-0xdcb10fff] Jul 14 21:56:25.720178 kernel: Zone ranges: Jul 14 21:56:25.720184 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Jul 14 21:56:25.720191 kernel: DMA32 empty Jul 14 21:56:25.720196 kernel: Normal empty Jul 14 21:56:25.720202 kernel: Movable zone start for each node Jul 14 21:56:25.720208 kernel: Early memory node ranges Jul 14 21:56:25.720213 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Jul 14 21:56:25.720219 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Jul 14 21:56:25.720225 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Jul 14 21:56:25.720230 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Jul 14 21:56:25.720236 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Jul 14 21:56:25.720241 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Jul 14 21:56:25.720247 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Jul 14 21:56:25.720253 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Jul 14 21:56:25.720259 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Jul 14 21:56:25.720265 kernel: psci: probing for conduit method from ACPI. Jul 14 21:56:25.720271 kernel: psci: PSCIv1.1 detected in firmware. Jul 14 21:56:25.720276 kernel: psci: Using standard PSCI v0.2 function IDs Jul 14 21:56:25.720282 kernel: psci: Trusted OS migration not required Jul 14 21:56:25.720290 kernel: psci: SMC Calling Convention v1.1 Jul 14 21:56:25.720296 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Jul 14 21:56:25.720304 kernel: ACPI: SRAT not present Jul 14 21:56:25.720313 kernel: percpu: Embedded 30 pages/cpu s82968 r8192 d31720 u122880 Jul 14 21:56:25.720319 kernel: pcpu-alloc: s82968 r8192 d31720 u122880 alloc=30*4096 Jul 14 21:56:25.720326 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Jul 14 21:56:25.720332 kernel: Detected PIPT I-cache on CPU0 Jul 14 21:56:25.720340 kernel: CPU features: detected: GIC system register CPU interface Jul 14 21:56:25.720347 kernel: CPU features: detected: Hardware dirty bit management Jul 14 21:56:25.720353 kernel: CPU features: detected: Spectre-v4 Jul 14 21:56:25.720359 kernel: CPU features: detected: Spectre-BHB Jul 14 21:56:25.720367 kernel: CPU features: kernel page table isolation forced ON by KASLR Jul 14 21:56:25.720373 kernel: CPU features: detected: Kernel page table isolation (KPTI) Jul 14 21:56:25.720379 kernel: CPU features: detected: ARM erratum 1418040 Jul 14 21:56:25.720384 kernel: CPU features: detected: SSBS not fully self-synchronizing Jul 14 21:56:25.720391 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Jul 14 21:56:25.720397 kernel: Policy zone: DMA Jul 14 21:56:25.720404 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=0fbac260ee8dcd4db6590eed44229ca41387b27ea0fa758fd2be410620d68236 Jul 14 21:56:25.720410 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 14 21:56:25.720416 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 14 21:56:25.720422 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 14 21:56:25.720428 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 14 21:56:25.720436 kernel: Memory: 2457340K/2572288K available (9792K kernel code, 2094K rwdata, 7588K rodata, 36416K init, 777K bss, 114948K reserved, 0K cma-reserved) Jul 14 21:56:25.720442 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Jul 14 21:56:25.720448 kernel: trace event string verifier disabled Jul 14 21:56:25.720454 kernel: rcu: Preemptible hierarchical RCU implementation. Jul 14 21:56:25.720461 kernel: rcu: RCU event tracing is enabled. Jul 14 21:56:25.720467 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Jul 14 21:56:25.720473 kernel: Trampoline variant of Tasks RCU enabled. Jul 14 21:56:25.720479 kernel: Tracing variant of Tasks RCU enabled. Jul 14 21:56:25.720485 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 14 21:56:25.720491 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Jul 14 21:56:25.720499 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Jul 14 21:56:25.720506 kernel: GICv3: 256 SPIs implemented Jul 14 21:56:25.720512 kernel: GICv3: 0 Extended SPIs implemented Jul 14 21:56:25.720518 kernel: GICv3: Distributor has no Range Selector support Jul 14 21:56:25.720524 kernel: Root IRQ handler: gic_handle_irq Jul 14 21:56:25.720530 kernel: GICv3: 16 PPIs implemented Jul 14 21:56:25.720536 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Jul 14 21:56:25.720542 kernel: ACPI: SRAT not present Jul 14 21:56:25.720547 kernel: ITS [mem 0x08080000-0x0809ffff] Jul 14 21:56:25.720554 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Jul 14 21:56:25.720560 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Jul 14 21:56:25.720566 kernel: GICv3: using LPI property table @0x00000000400d0000 Jul 14 21:56:25.720572 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Jul 14 21:56:25.720579 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 14 21:56:25.720585 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Jul 14 21:56:25.720592 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Jul 14 21:56:25.720598 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Jul 14 21:56:25.720604 kernel: arm-pv: using stolen time PV Jul 14 21:56:25.720610 kernel: Console: colour dummy device 80x25 Jul 14 21:56:25.720617 kernel: ACPI: Core revision 20210730 Jul 14 21:56:25.720623 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Jul 14 21:56:25.720630 kernel: pid_max: default: 32768 minimum: 301 Jul 14 21:56:25.720636 kernel: LSM: Security Framework initializing Jul 14 21:56:25.720643 kernel: SELinux: Initializing. Jul 14 21:56:25.720649 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 14 21:56:25.720655 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 14 21:56:25.720662 kernel: rcu: Hierarchical SRCU implementation. Jul 14 21:56:25.720668 kernel: Platform MSI: ITS@0x8080000 domain created Jul 14 21:56:25.720674 kernel: PCI/MSI: ITS@0x8080000 domain created Jul 14 21:56:25.720681 kernel: Remapping and enabling EFI services. Jul 14 21:56:25.720687 kernel: smp: Bringing up secondary CPUs ... Jul 14 21:56:25.720693 kernel: Detected PIPT I-cache on CPU1 Jul 14 21:56:25.720701 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Jul 14 21:56:25.720707 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Jul 14 21:56:25.720714 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 14 21:56:25.720720 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Jul 14 21:56:25.720726 kernel: Detected PIPT I-cache on CPU2 Jul 14 21:56:25.720732 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Jul 14 21:56:25.720739 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Jul 14 21:56:25.720745 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 14 21:56:25.720751 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Jul 14 21:56:25.720757 kernel: Detected PIPT I-cache on CPU3 Jul 14 21:56:25.720764 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Jul 14 21:56:25.720771 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Jul 14 21:56:25.720777 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 14 21:56:25.720783 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Jul 14 21:56:25.720793 kernel: smp: Brought up 1 node, 4 CPUs Jul 14 21:56:25.720800 kernel: SMP: Total of 4 processors activated. Jul 14 21:56:25.720807 kernel: CPU features: detected: 32-bit EL0 Support Jul 14 21:56:25.720814 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Jul 14 21:56:25.720820 kernel: CPU features: detected: Common not Private translations Jul 14 21:56:25.720827 kernel: CPU features: detected: CRC32 instructions Jul 14 21:56:25.720833 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Jul 14 21:56:25.720840 kernel: CPU features: detected: LSE atomic instructions Jul 14 21:56:25.720847 kernel: CPU features: detected: Privileged Access Never Jul 14 21:56:25.720853 kernel: CPU features: detected: RAS Extension Support Jul 14 21:56:25.720869 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Jul 14 21:56:25.720876 kernel: CPU: All CPU(s) started at EL1 Jul 14 21:56:25.720883 kernel: alternatives: patching kernel code Jul 14 21:56:25.720890 kernel: devtmpfs: initialized Jul 14 21:56:25.720897 kernel: KASLR enabled Jul 14 21:56:25.720904 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 14 21:56:25.720910 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Jul 14 21:56:25.720917 kernel: pinctrl core: initialized pinctrl subsystem Jul 14 21:56:25.720923 kernel: SMBIOS 3.0.0 present. Jul 14 21:56:25.720930 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Jul 14 21:56:25.720936 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 14 21:56:25.720943 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Jul 14 21:56:25.720951 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Jul 14 21:56:25.720957 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Jul 14 21:56:25.720964 kernel: audit: initializing netlink subsys (disabled) Jul 14 21:56:25.720976 kernel: audit: type=2000 audit(0.031:1): state=initialized audit_enabled=0 res=1 Jul 14 21:56:25.720983 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 14 21:56:25.720989 kernel: cpuidle: using governor menu Jul 14 21:56:25.720996 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Jul 14 21:56:25.721002 kernel: ASID allocator initialised with 32768 entries Jul 14 21:56:25.721009 kernel: ACPI: bus type PCI registered Jul 14 21:56:25.721017 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 14 21:56:25.721023 kernel: Serial: AMBA PL011 UART driver Jul 14 21:56:25.721030 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 14 21:56:25.721036 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Jul 14 21:56:25.721043 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 14 21:56:25.721050 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Jul 14 21:56:25.721056 kernel: cryptd: max_cpu_qlen set to 1000 Jul 14 21:56:25.721063 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Jul 14 21:56:25.721069 kernel: ACPI: Added _OSI(Module Device) Jul 14 21:56:25.721076 kernel: ACPI: Added _OSI(Processor Device) Jul 14 21:56:25.721083 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 14 21:56:25.721090 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 14 21:56:25.721096 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 14 21:56:25.721102 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 14 21:56:25.721109 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 14 21:56:25.721115 kernel: ACPI: Interpreter enabled Jul 14 21:56:25.721122 kernel: ACPI: Using GIC for interrupt routing Jul 14 21:56:25.721128 kernel: ACPI: MCFG table detected, 1 entries Jul 14 21:56:25.721136 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Jul 14 21:56:25.721142 kernel: printk: console [ttyAMA0] enabled Jul 14 21:56:25.721149 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 14 21:56:25.721257 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 14 21:56:25.721317 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Jul 14 21:56:25.721373 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Jul 14 21:56:25.721428 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Jul 14 21:56:25.721485 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Jul 14 21:56:25.721494 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Jul 14 21:56:25.721501 kernel: PCI host bridge to bus 0000:00 Jul 14 21:56:25.721563 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Jul 14 21:56:25.721616 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Jul 14 21:56:25.721666 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Jul 14 21:56:25.721716 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 14 21:56:25.721786 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Jul 14 21:56:25.721878 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Jul 14 21:56:25.721942 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Jul 14 21:56:25.722010 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Jul 14 21:56:25.722069 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Jul 14 21:56:25.722125 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Jul 14 21:56:25.722182 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Jul 14 21:56:25.722242 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Jul 14 21:56:25.722296 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Jul 14 21:56:25.722348 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Jul 14 21:56:25.722399 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Jul 14 21:56:25.722408 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Jul 14 21:56:25.722414 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Jul 14 21:56:25.722421 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Jul 14 21:56:25.722428 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Jul 14 21:56:25.722436 kernel: iommu: Default domain type: Translated Jul 14 21:56:25.722443 kernel: iommu: DMA domain TLB invalidation policy: strict mode Jul 14 21:56:25.722449 kernel: vgaarb: loaded Jul 14 21:56:25.722456 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 14 21:56:25.722463 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 14 21:56:25.722469 kernel: PTP clock support registered Jul 14 21:56:25.722476 kernel: Registered efivars operations Jul 14 21:56:25.722482 kernel: clocksource: Switched to clocksource arch_sys_counter Jul 14 21:56:25.722489 kernel: VFS: Disk quotas dquot_6.6.0 Jul 14 21:56:25.722497 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 14 21:56:25.722503 kernel: pnp: PnP ACPI init Jul 14 21:56:25.722563 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Jul 14 21:56:25.722572 kernel: pnp: PnP ACPI: found 1 devices Jul 14 21:56:25.722579 kernel: NET: Registered PF_INET protocol family Jul 14 21:56:25.722586 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 14 21:56:25.722593 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 14 21:56:25.722599 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 14 21:56:25.722608 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 14 21:56:25.722614 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 14 21:56:25.722621 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 14 21:56:25.722627 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 14 21:56:25.722634 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 14 21:56:25.722640 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 14 21:56:25.722647 kernel: PCI: CLS 0 bytes, default 64 Jul 14 21:56:25.722653 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Jul 14 21:56:25.722660 kernel: kvm [1]: HYP mode not available Jul 14 21:56:25.722668 kernel: Initialise system trusted keyrings Jul 14 21:56:25.722674 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 14 21:56:25.722681 kernel: Key type asymmetric registered Jul 14 21:56:25.722687 kernel: Asymmetric key parser 'x509' registered Jul 14 21:56:25.722694 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 14 21:56:25.722700 kernel: io scheduler mq-deadline registered Jul 14 21:56:25.722707 kernel: io scheduler kyber registered Jul 14 21:56:25.722713 kernel: io scheduler bfq registered Jul 14 21:56:25.722720 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Jul 14 21:56:25.722728 kernel: ACPI: button: Power Button [PWRB] Jul 14 21:56:25.722735 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Jul 14 21:56:25.722791 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Jul 14 21:56:25.722800 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 14 21:56:25.722806 kernel: thunder_xcv, ver 1.0 Jul 14 21:56:25.722813 kernel: thunder_bgx, ver 1.0 Jul 14 21:56:25.722819 kernel: nicpf, ver 1.0 Jul 14 21:56:25.722826 kernel: nicvf, ver 1.0 Jul 14 21:56:25.722903 kernel: rtc-efi rtc-efi.0: registered as rtc0 Jul 14 21:56:25.722961 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-07-14T21:56:25 UTC (1752530185) Jul 14 21:56:25.722975 kernel: hid: raw HID events driver (C) Jiri Kosina Jul 14 21:56:25.722982 kernel: NET: Registered PF_INET6 protocol family Jul 14 21:56:25.722989 kernel: Segment Routing with IPv6 Jul 14 21:56:25.722995 kernel: In-situ OAM (IOAM) with IPv6 Jul 14 21:56:25.723002 kernel: NET: Registered PF_PACKET protocol family Jul 14 21:56:25.723009 kernel: Key type dns_resolver registered Jul 14 21:56:25.723015 kernel: registered taskstats version 1 Jul 14 21:56:25.723023 kernel: Loading compiled-in X.509 certificates Jul 14 21:56:25.723030 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.187-flatcar: 118351bb2b1409a8fe1c98db16ecff1bb5342a27' Jul 14 21:56:25.723037 kernel: Key type .fscrypt registered Jul 14 21:56:25.723043 kernel: Key type fscrypt-provisioning registered Jul 14 21:56:25.723049 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 14 21:56:25.723056 kernel: ima: Allocated hash algorithm: sha1 Jul 14 21:56:25.723063 kernel: ima: No architecture policies found Jul 14 21:56:25.723069 kernel: clk: Disabling unused clocks Jul 14 21:56:25.723075 kernel: Freeing unused kernel memory: 36416K Jul 14 21:56:25.723083 kernel: Run /init as init process Jul 14 21:56:25.723090 kernel: with arguments: Jul 14 21:56:25.723096 kernel: /init Jul 14 21:56:25.723102 kernel: with environment: Jul 14 21:56:25.723109 kernel: HOME=/ Jul 14 21:56:25.723115 kernel: TERM=linux Jul 14 21:56:25.723122 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 14 21:56:25.723130 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 14 21:56:25.723139 systemd[1]: Detected virtualization kvm. Jul 14 21:56:25.723147 systemd[1]: Detected architecture arm64. Jul 14 21:56:25.723154 systemd[1]: Running in initrd. Jul 14 21:56:25.723160 systemd[1]: No hostname configured, using default hostname. Jul 14 21:56:25.723167 systemd[1]: Hostname set to . Jul 14 21:56:25.723174 systemd[1]: Initializing machine ID from VM UUID. Jul 14 21:56:25.723181 systemd[1]: Queued start job for default target initrd.target. Jul 14 21:56:25.723188 systemd[1]: Started systemd-ask-password-console.path. Jul 14 21:56:25.723196 systemd[1]: Reached target cryptsetup.target. Jul 14 21:56:25.723203 systemd[1]: Reached target paths.target. Jul 14 21:56:25.723210 systemd[1]: Reached target slices.target. Jul 14 21:56:25.723217 systemd[1]: Reached target swap.target. Jul 14 21:56:25.723223 systemd[1]: Reached target timers.target. Jul 14 21:56:25.723231 systemd[1]: Listening on iscsid.socket. Jul 14 21:56:25.723237 systemd[1]: Listening on iscsiuio.socket. Jul 14 21:56:25.723244 systemd[1]: Listening on systemd-journald-audit.socket. Jul 14 21:56:25.723252 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 14 21:56:25.723260 systemd[1]: Listening on systemd-journald.socket. Jul 14 21:56:25.723266 systemd[1]: Listening on systemd-networkd.socket. Jul 14 21:56:25.723273 systemd[1]: Listening on systemd-udevd-control.socket. Jul 14 21:56:25.723280 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 14 21:56:25.723287 systemd[1]: Reached target sockets.target. Jul 14 21:56:25.723294 systemd[1]: Starting kmod-static-nodes.service... Jul 14 21:56:25.723301 systemd[1]: Finished network-cleanup.service. Jul 14 21:56:25.723308 systemd[1]: Starting systemd-fsck-usr.service... Jul 14 21:56:25.723316 systemd[1]: Starting systemd-journald.service... Jul 14 21:56:25.723323 systemd[1]: Starting systemd-modules-load.service... Jul 14 21:56:25.723330 systemd[1]: Starting systemd-resolved.service... Jul 14 21:56:25.723337 systemd[1]: Starting systemd-vconsole-setup.service... Jul 14 21:56:25.723344 systemd[1]: Finished kmod-static-nodes.service. Jul 14 21:56:25.723351 systemd[1]: Finished systemd-fsck-usr.service. Jul 14 21:56:25.723358 systemd[1]: Finished systemd-vconsole-setup.service. Jul 14 21:56:25.723365 systemd[1]: Starting dracut-cmdline-ask.service... Jul 14 21:56:25.723373 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 14 21:56:25.723383 systemd-journald[290]: Journal started Jul 14 21:56:25.723421 systemd-journald[290]: Runtime Journal (/run/log/journal/5c14cdb76a2a49dbadb517d8bd15ad51) is 6.0M, max 48.7M, 42.6M free. Jul 14 21:56:25.716599 systemd-modules-load[291]: Inserted module 'overlay' Jul 14 21:56:25.724938 systemd[1]: Started systemd-journald.service. Jul 14 21:56:25.724000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:25.730117 kernel: audit: type=1130 audit(1752530185.724:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:25.734346 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 14 21:56:25.740835 kernel: audit: type=1130 audit(1752530185.735:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:25.740852 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 14 21:56:25.735000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:25.744608 systemd-resolved[292]: Positive Trust Anchors: Jul 14 21:56:25.745482 kernel: Bridge firewalling registered Jul 14 21:56:25.744623 systemd-resolved[292]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 14 21:56:25.744650 systemd-resolved[292]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 14 21:56:25.744700 systemd-modules-load[291]: Inserted module 'br_netfilter' Jul 14 21:56:25.752000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:25.746995 systemd[1]: Finished dracut-cmdline-ask.service. Jul 14 21:56:25.755956 kernel: audit: type=1130 audit(1752530185.752:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:25.749762 systemd-resolved[292]: Defaulting to hostname 'linux'. Jul 14 21:56:25.759990 kernel: SCSI subsystem initialized Jul 14 21:56:25.760005 kernel: audit: type=1130 audit(1752530185.756:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:25.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:25.755249 systemd[1]: Started systemd-resolved.service. Jul 14 21:56:25.759979 systemd[1]: Reached target nss-lookup.target. Jul 14 21:56:25.761343 systemd[1]: Starting dracut-cmdline.service... Jul 14 21:56:25.765357 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 14 21:56:25.765384 kernel: device-mapper: uevent: version 1.0.3 Jul 14 21:56:25.766384 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 14 21:56:25.768618 systemd-modules-load[291]: Inserted module 'dm_multipath' Jul 14 21:56:25.769340 systemd[1]: Finished systemd-modules-load.service. Jul 14 21:56:25.770000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:25.773182 dracut-cmdline[307]: dracut-dracut-053 Jul 14 21:56:25.773182 dracut-cmdline[307]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=0fbac260ee8dcd4db6590eed44229ca41387b27ea0fa758fd2be410620d68236 Jul 14 21:56:25.778367 kernel: audit: type=1130 audit(1752530185.770:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:25.772077 systemd[1]: Starting systemd-sysctl.service... Jul 14 21:56:25.778760 systemd[1]: Finished systemd-sysctl.service. Jul 14 21:56:25.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:25.782887 kernel: audit: type=1130 audit(1752530185.778:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:25.830881 kernel: Loading iSCSI transport class v2.0-870. Jul 14 21:56:25.842887 kernel: iscsi: registered transport (tcp) Jul 14 21:56:25.857898 kernel: iscsi: registered transport (qla4xxx) Jul 14 21:56:25.857929 kernel: QLogic iSCSI HBA Driver Jul 14 21:56:25.889407 systemd[1]: Finished dracut-cmdline.service. Jul 14 21:56:25.889000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:25.890914 systemd[1]: Starting dracut-pre-udev.service... Jul 14 21:56:25.894273 kernel: audit: type=1130 audit(1752530185.889:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:25.935884 kernel: raid6: neonx8 gen() 12156 MB/s Jul 14 21:56:25.952893 kernel: raid6: neonx8 xor() 10786 MB/s Jul 14 21:56:25.969889 kernel: raid6: neonx4 gen() 13504 MB/s Jul 14 21:56:25.986888 kernel: raid6: neonx4 xor() 11140 MB/s Jul 14 21:56:26.003888 kernel: raid6: neonx2 gen() 13019 MB/s Jul 14 21:56:26.020888 kernel: raid6: neonx2 xor() 10406 MB/s Jul 14 21:56:26.037887 kernel: raid6: neonx1 gen() 10552 MB/s Jul 14 21:56:26.054884 kernel: raid6: neonx1 xor() 8761 MB/s Jul 14 21:56:26.071889 kernel: raid6: int64x8 gen() 6260 MB/s Jul 14 21:56:26.088890 kernel: raid6: int64x8 xor() 3536 MB/s Jul 14 21:56:26.105894 kernel: raid6: int64x4 gen() 7155 MB/s Jul 14 21:56:26.122888 kernel: raid6: int64x4 xor() 3838 MB/s Jul 14 21:56:26.139892 kernel: raid6: int64x2 gen() 6131 MB/s Jul 14 21:56:26.156882 kernel: raid6: int64x2 xor() 3312 MB/s Jul 14 21:56:26.173881 kernel: raid6: int64x1 gen() 5034 MB/s Jul 14 21:56:26.190908 kernel: raid6: int64x1 xor() 2642 MB/s Jul 14 21:56:26.190919 kernel: raid6: using algorithm neonx4 gen() 13504 MB/s Jul 14 21:56:26.190927 kernel: raid6: .... xor() 11140 MB/s, rmw enabled Jul 14 21:56:26.191950 kernel: raid6: using neon recovery algorithm Jul 14 21:56:26.203200 kernel: xor: measuring software checksum speed Jul 14 21:56:26.203230 kernel: 8regs : 16576 MB/sec Jul 14 21:56:26.203246 kernel: 32regs : 20707 MB/sec Jul 14 21:56:26.204391 kernel: arm64_neon : 27700 MB/sec Jul 14 21:56:26.204403 kernel: xor: using function: arm64_neon (27700 MB/sec) Jul 14 21:56:26.259889 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Jul 14 21:56:26.270101 systemd[1]: Finished dracut-pre-udev.service. Jul 14 21:56:26.270000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:26.272003 systemd[1]: Starting systemd-udevd.service... Jul 14 21:56:26.275845 kernel: audit: type=1130 audit(1752530186.270:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:26.275890 kernel: audit: type=1334 audit(1752530186.270:10): prog-id=7 op=LOAD Jul 14 21:56:26.270000 audit: BPF prog-id=7 op=LOAD Jul 14 21:56:26.270000 audit: BPF prog-id=8 op=LOAD Jul 14 21:56:26.285603 systemd-udevd[492]: Using default interface naming scheme 'v252'. Jul 14 21:56:26.288849 systemd[1]: Started systemd-udevd.service. Jul 14 21:56:26.288000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:26.290769 systemd[1]: Starting dracut-pre-trigger.service... Jul 14 21:56:26.302017 dracut-pre-trigger[500]: rd.md=0: removing MD RAID activation Jul 14 21:56:26.328346 systemd[1]: Finished dracut-pre-trigger.service. Jul 14 21:56:26.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:26.329904 systemd[1]: Starting systemd-udev-trigger.service... Jul 14 21:56:26.363973 systemd[1]: Finished systemd-udev-trigger.service. Jul 14 21:56:26.363000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:26.393057 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Jul 14 21:56:26.404647 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 14 21:56:26.404661 kernel: GPT:9289727 != 19775487 Jul 14 21:56:26.404675 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 14 21:56:26.404684 kernel: GPT:9289727 != 19775487 Jul 14 21:56:26.404691 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 14 21:56:26.404700 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 14 21:56:26.417890 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 14 21:56:26.420872 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by (udev-worker) (550) Jul 14 21:56:26.424603 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 14 21:56:26.425649 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 14 21:56:26.432051 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 14 21:56:26.435329 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 14 21:56:26.436941 systemd[1]: Starting disk-uuid.service... Jul 14 21:56:26.442593 disk-uuid[563]: Primary Header is updated. Jul 14 21:56:26.442593 disk-uuid[563]: Secondary Entries is updated. Jul 14 21:56:26.442593 disk-uuid[563]: Secondary Header is updated. Jul 14 21:56:26.445560 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 14 21:56:27.457883 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 14 21:56:27.458189 disk-uuid[564]: The operation has completed successfully. Jul 14 21:56:27.491399 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 14 21:56:27.491000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:27.491000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:27.491494 systemd[1]: Finished disk-uuid.service. Jul 14 21:56:27.493041 systemd[1]: Starting verity-setup.service... Jul 14 21:56:27.518932 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Jul 14 21:56:27.539444 systemd[1]: Found device dev-mapper-usr.device. Jul 14 21:56:27.541856 systemd[1]: Mounting sysusr-usr.mount... Jul 14 21:56:27.544259 systemd[1]: Finished verity-setup.service. Jul 14 21:56:27.544000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:27.588604 systemd[1]: Mounted sysusr-usr.mount. Jul 14 21:56:27.589888 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 14 21:56:27.589428 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 14 21:56:27.591277 systemd[1]: Starting ignition-setup.service... Jul 14 21:56:27.592512 systemd[1]: Starting parse-ip-for-networkd.service... Jul 14 21:56:27.600267 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Jul 14 21:56:27.600306 kernel: BTRFS info (device vda6): using free space tree Jul 14 21:56:27.600315 kernel: BTRFS info (device vda6): has skinny extents Jul 14 21:56:27.610651 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 14 21:56:27.618611 systemd[1]: Finished ignition-setup.service. Jul 14 21:56:27.619000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:27.620149 systemd[1]: Starting ignition-fetch-offline.service... Jul 14 21:56:27.694506 systemd[1]: Finished parse-ip-for-networkd.service. Jul 14 21:56:27.695000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:27.695000 audit: BPF prog-id=9 op=LOAD Jul 14 21:56:27.696745 systemd[1]: Starting systemd-networkd.service... Jul 14 21:56:27.705403 ignition[646]: Ignition 2.14.0 Jul 14 21:56:27.705413 ignition[646]: Stage: fetch-offline Jul 14 21:56:27.705445 ignition[646]: no configs at "/usr/lib/ignition/base.d" Jul 14 21:56:27.705454 ignition[646]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 14 21:56:27.705609 ignition[646]: parsed url from cmdline: "" Jul 14 21:56:27.705613 ignition[646]: no config URL provided Jul 14 21:56:27.705617 ignition[646]: reading system config file "/usr/lib/ignition/user.ign" Jul 14 21:56:27.705623 ignition[646]: no config at "/usr/lib/ignition/user.ign" Jul 14 21:56:27.705641 ignition[646]: op(1): [started] loading QEMU firmware config module Jul 14 21:56:27.705647 ignition[646]: op(1): executing: "modprobe" "qemu_fw_cfg" Jul 14 21:56:27.709538 ignition[646]: op(1): [finished] loading QEMU firmware config module Jul 14 21:56:27.726435 systemd-networkd[738]: lo: Link UP Jul 14 21:56:27.726447 systemd-networkd[738]: lo: Gained carrier Jul 14 21:56:27.727107 systemd-networkd[738]: Enumeration completed Jul 14 21:56:27.727475 systemd-networkd[738]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 14 21:56:27.728939 systemd-networkd[738]: eth0: Link UP Jul 14 21:56:27.728943 systemd-networkd[738]: eth0: Gained carrier Jul 14 21:56:27.730000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:27.728982 systemd[1]: Started systemd-networkd.service. Jul 14 21:56:27.731137 systemd[1]: Reached target network.target. Jul 14 21:56:27.733186 systemd[1]: Starting iscsiuio.service... Jul 14 21:56:27.742018 systemd[1]: Started iscsiuio.service. Jul 14 21:56:27.741000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:27.743587 systemd[1]: Starting iscsid.service... Jul 14 21:56:27.746698 iscsid[744]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 14 21:56:27.746698 iscsid[744]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 14 21:56:27.746698 iscsid[744]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 14 21:56:27.746698 iscsid[744]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 14 21:56:27.746698 iscsid[744]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 14 21:56:27.746698 iscsid[744]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 14 21:56:27.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:27.749474 systemd[1]: Started iscsid.service. Jul 14 21:56:27.754875 systemd[1]: Starting dracut-initqueue.service... Jul 14 21:56:27.755945 systemd-networkd[738]: eth0: DHCPv4 address 10.0.0.76/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 14 21:56:27.764839 systemd[1]: Finished dracut-initqueue.service. Jul 14 21:56:27.764000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:27.765772 systemd[1]: Reached target remote-fs-pre.target. Jul 14 21:56:27.767308 systemd[1]: Reached target remote-cryptsetup.target. Jul 14 21:56:27.768783 systemd[1]: Reached target remote-fs.target. Jul 14 21:56:27.770974 systemd[1]: Starting dracut-pre-mount.service... Jul 14 21:56:27.776974 ignition[646]: parsing config with SHA512: b55c3f5fb81e022135fcf2ce0dc6a04455e8f2b01e8c5cc6452e82f92e954429a59c02358f074c3e90dd3179779c5e6505643a608ef8beee78d599682b14423d Jul 14 21:56:27.778402 systemd[1]: Finished dracut-pre-mount.service. Jul 14 21:56:27.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:27.784654 unknown[646]: fetched base config from "system" Jul 14 21:56:27.784679 unknown[646]: fetched user config from "qemu" Jul 14 21:56:27.785452 ignition[646]: fetch-offline: fetch-offline passed Jul 14 21:56:27.786879 systemd[1]: Finished ignition-fetch-offline.service. Jul 14 21:56:27.788000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:27.785550 ignition[646]: Ignition finished successfully Jul 14 21:56:27.788463 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 14 21:56:27.789150 systemd[1]: Starting ignition-kargs.service... Jul 14 21:56:27.797790 ignition[759]: Ignition 2.14.0 Jul 14 21:56:27.797800 ignition[759]: Stage: kargs Jul 14 21:56:27.797914 ignition[759]: no configs at "/usr/lib/ignition/base.d" Jul 14 21:56:27.800059 systemd[1]: Finished ignition-kargs.service. Jul 14 21:56:27.801000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:27.797924 ignition[759]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 14 21:56:27.798693 ignition[759]: kargs: kargs passed Jul 14 21:56:27.802250 systemd[1]: Starting ignition-disks.service... Jul 14 21:56:27.798729 ignition[759]: Ignition finished successfully Jul 14 21:56:27.808084 ignition[765]: Ignition 2.14.0 Jul 14 21:56:27.808094 ignition[765]: Stage: disks Jul 14 21:56:27.808174 ignition[765]: no configs at "/usr/lib/ignition/base.d" Jul 14 21:56:27.810107 systemd[1]: Finished ignition-disks.service. Jul 14 21:56:27.810000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:27.808183 ignition[765]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 14 21:56:27.811661 systemd[1]: Reached target initrd-root-device.target. Jul 14 21:56:27.809181 ignition[765]: disks: disks passed Jul 14 21:56:27.812941 systemd[1]: Reached target local-fs-pre.target. Jul 14 21:56:27.809221 ignition[765]: Ignition finished successfully Jul 14 21:56:27.814567 systemd[1]: Reached target local-fs.target. Jul 14 21:56:27.815980 systemd[1]: Reached target sysinit.target. Jul 14 21:56:27.817144 systemd[1]: Reached target basic.target. Jul 14 21:56:27.819272 systemd[1]: Starting systemd-fsck-root.service... Jul 14 21:56:27.828305 systemd-resolved[292]: Detected conflict on linux IN A 10.0.0.76 Jul 14 21:56:27.828319 systemd-resolved[292]: Hostname conflict, changing published hostname from 'linux' to 'linux11'. Jul 14 21:56:27.831091 systemd-fsck[773]: ROOT: clean, 619/553520 files, 56022/553472 blocks Jul 14 21:56:27.833159 systemd[1]: Finished systemd-fsck-root.service. Jul 14 21:56:27.834000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:27.836026 systemd[1]: Mounting sysroot.mount... Jul 14 21:56:27.842589 systemd[1]: Mounted sysroot.mount. Jul 14 21:56:27.843272 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 14 21:56:27.844045 systemd[1]: Reached target initrd-root-fs.target. Jul 14 21:56:27.846636 systemd[1]: Mounting sysroot-usr.mount... Jul 14 21:56:27.848398 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 14 21:56:27.849881 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 14 21:56:27.851398 systemd[1]: Reached target ignition-diskful.target. Jul 14 21:56:27.852974 systemd[1]: Mounted sysroot-usr.mount. Jul 14 21:56:27.854401 systemd[1]: Starting initrd-setup-root.service... Jul 14 21:56:27.858607 initrd-setup-root[783]: cut: /sysroot/etc/passwd: No such file or directory Jul 14 21:56:27.862131 initrd-setup-root[791]: cut: /sysroot/etc/group: No such file or directory Jul 14 21:56:27.865897 initrd-setup-root[799]: cut: /sysroot/etc/shadow: No such file or directory Jul 14 21:56:27.869975 initrd-setup-root[807]: cut: /sysroot/etc/gshadow: No such file or directory Jul 14 21:56:27.895190 systemd[1]: Finished initrd-setup-root.service. Jul 14 21:56:27.895000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:27.896695 systemd[1]: Starting ignition-mount.service... Jul 14 21:56:27.898026 systemd[1]: Starting sysroot-boot.service... Jul 14 21:56:27.901680 bash[824]: umount: /sysroot/usr/share/oem: not mounted. Jul 14 21:56:27.909934 ignition[826]: INFO : Ignition 2.14.0 Jul 14 21:56:27.909934 ignition[826]: INFO : Stage: mount Jul 14 21:56:27.911388 ignition[826]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 14 21:56:27.911388 ignition[826]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 14 21:56:27.911388 ignition[826]: INFO : mount: mount passed Jul 14 21:56:27.911388 ignition[826]: INFO : Ignition finished successfully Jul 14 21:56:27.912000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:27.911736 systemd[1]: Finished ignition-mount.service. Jul 14 21:56:27.921005 systemd[1]: Finished sysroot-boot.service. Jul 14 21:56:27.920000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:56:28.554727 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 14 21:56:28.560883 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/vda6 scanned by mount (835) Jul 14 21:56:28.560912 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Jul 14 21:56:28.562376 kernel: BTRFS info (device vda6): using free space tree Jul 14 21:56:28.562392 kernel: BTRFS info (device vda6): has skinny extents Jul 14 21:56:28.565710 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 14 21:56:28.567232 systemd[1]: Starting ignition-files.service... Jul 14 21:56:28.580468 ignition[855]: INFO : Ignition 2.14.0 Jul 14 21:56:28.580468 ignition[855]: INFO : Stage: files Jul 14 21:56:28.582114 ignition[855]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 14 21:56:28.582114 ignition[855]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 14 21:56:28.582114 ignition[855]: DEBUG : files: compiled without relabeling support, skipping Jul 14 21:56:28.588291 ignition[855]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 14 21:56:28.588291 ignition[855]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 14 21:56:28.591562 ignition[855]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 14 21:56:28.591562 ignition[855]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 14 21:56:28.595107 ignition[855]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 14 21:56:28.595107 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Jul 14 21:56:28.595107 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.13.2-linux-arm64.tar.gz: attempt #1 Jul 14 21:56:28.594421 unknown[855]: wrote ssh authorized keys file for user: core Jul 14 21:56:29.195228 systemd-networkd[738]: eth0: Gained IPv6LL Jul 14 21:56:38.748870 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 14 21:56:38.958188 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Jul 14 21:56:38.960724 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 14 21:56:38.960724 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 14 21:56:38.960724 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 14 21:56:38.960724 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 14 21:56:38.960724 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 14 21:56:38.960724 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 14 21:56:38.960724 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 14 21:56:38.960724 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 14 21:56:38.960724 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 14 21:56:38.960724 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 14 21:56:38.960724 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Jul 14 21:56:38.960724 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Jul 14 21:56:38.960724 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Jul 14 21:56:38.960724 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.31.8-arm64.raw: attempt #1 Jul 14 21:57:09.487946 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 14 21:57:09.910254 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Jul 14 21:57:09.910254 ignition[855]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Jul 14 21:57:09.914148 ignition[855]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 14 21:57:09.914148 ignition[855]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 14 21:57:09.914148 ignition[855]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Jul 14 21:57:09.914148 ignition[855]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Jul 14 21:57:09.914148 ignition[855]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 14 21:57:09.914148 ignition[855]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 14 21:57:09.914148 ignition[855]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Jul 14 21:57:09.914148 ignition[855]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 14 21:57:09.914148 ignition[855]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 14 21:57:09.914148 ignition[855]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Jul 14 21:57:09.914148 ignition[855]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 14 21:57:09.941795 ignition[855]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 14 21:57:09.944320 ignition[855]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Jul 14 21:57:09.944320 ignition[855]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 14 21:57:09.944320 ignition[855]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 14 21:57:09.944320 ignition[855]: INFO : files: files passed Jul 14 21:57:09.944320 ignition[855]: INFO : Ignition finished successfully Jul 14 21:57:09.958781 kernel: kauditd_printk_skb: 22 callbacks suppressed Jul 14 21:57:09.958803 kernel: audit: type=1130 audit(1752530229.946:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:09.958819 kernel: audit: type=1130 audit(1752530229.954:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:09.946000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:09.954000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:09.944418 systemd[1]: Finished ignition-files.service. Jul 14 21:57:09.964423 kernel: audit: type=1130 audit(1752530229.958:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:09.964441 kernel: audit: type=1131 audit(1752530229.958:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:09.958000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:09.958000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:09.947215 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 14 21:57:09.952074 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 14 21:57:09.968254 initrd-setup-root-after-ignition[878]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Jul 14 21:57:09.952691 systemd[1]: Starting ignition-quench.service... Jul 14 21:57:09.970461 initrd-setup-root-after-ignition[880]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 14 21:57:09.954472 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 14 21:57:09.955808 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 14 21:57:09.957909 systemd[1]: Finished ignition-quench.service. Jul 14 21:57:09.959588 systemd[1]: Reached target ignition-complete.target. Jul 14 21:57:09.965660 systemd[1]: Starting initrd-parse-etc.service... Jul 14 21:57:09.977078 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 14 21:57:09.977161 systemd[1]: Finished initrd-parse-etc.service. Jul 14 21:57:09.977000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:09.977000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:09.978741 systemd[1]: Reached target initrd-fs.target. Jul 14 21:57:09.986052 kernel: audit: type=1130 audit(1752530229.977:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:09.986075 kernel: audit: type=1131 audit(1752530229.977:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:09.985430 systemd[1]: Reached target initrd.target. Jul 14 21:57:09.986740 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 14 21:57:09.987545 systemd[1]: Starting dracut-pre-pivot.service... Jul 14 21:57:09.997876 systemd[1]: Finished dracut-pre-pivot.service. Jul 14 21:57:09.997000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:09.999546 systemd[1]: Starting initrd-cleanup.service... Jul 14 21:57:10.003134 kernel: audit: type=1130 audit(1752530229.997:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.007666 systemd[1]: Stopped target nss-lookup.target. Jul 14 21:57:10.008564 systemd[1]: Stopped target remote-cryptsetup.target. Jul 14 21:57:10.010005 systemd[1]: Stopped target timers.target. Jul 14 21:57:10.011301 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 14 21:57:10.011000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.011406 systemd[1]: Stopped dracut-pre-pivot.service. Jul 14 21:57:10.016847 kernel: audit: type=1131 audit(1752530230.011:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.012693 systemd[1]: Stopped target initrd.target. Jul 14 21:57:10.016327 systemd[1]: Stopped target basic.target. Jul 14 21:57:10.017598 systemd[1]: Stopped target ignition-complete.target. Jul 14 21:57:10.018966 systemd[1]: Stopped target ignition-diskful.target. Jul 14 21:57:10.020262 systemd[1]: Stopped target initrd-root-device.target. Jul 14 21:57:10.021722 systemd[1]: Stopped target remote-fs.target. Jul 14 21:57:10.023071 systemd[1]: Stopped target remote-fs-pre.target. Jul 14 21:57:10.024444 systemd[1]: Stopped target sysinit.target. Jul 14 21:57:10.025683 systemd[1]: Stopped target local-fs.target. Jul 14 21:57:10.026964 systemd[1]: Stopped target local-fs-pre.target. Jul 14 21:57:10.028212 systemd[1]: Stopped target swap.target. Jul 14 21:57:10.029000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.029374 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 14 21:57:10.034805 kernel: audit: type=1131 audit(1752530230.029:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.029488 systemd[1]: Stopped dracut-pre-mount.service. Jul 14 21:57:10.034000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.030753 systemd[1]: Stopped target cryptsetup.target. Jul 14 21:57:10.039702 kernel: audit: type=1131 audit(1752530230.034:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.038000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.034101 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 14 21:57:10.034198 systemd[1]: Stopped dracut-initqueue.service. Jul 14 21:57:10.035634 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 14 21:57:10.035727 systemd[1]: Stopped ignition-fetch-offline.service. Jul 14 21:57:10.039254 systemd[1]: Stopped target paths.target. Jul 14 21:57:10.040393 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 14 21:57:10.043899 systemd[1]: Stopped systemd-ask-password-console.path. Jul 14 21:57:10.045076 systemd[1]: Stopped target slices.target. Jul 14 21:57:10.046550 systemd[1]: Stopped target sockets.target. Jul 14 21:57:10.049000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.047924 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 14 21:57:10.050000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.048028 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 14 21:57:10.049351 systemd[1]: ignition-files.service: Deactivated successfully. Jul 14 21:57:10.049440 systemd[1]: Stopped ignition-files.service. Jul 14 21:57:10.051407 systemd[1]: Stopping ignition-mount.service... Jul 14 21:57:10.056545 iscsid[744]: iscsid shutting down. Jul 14 21:57:10.052210 systemd[1]: Stopping iscsid.service... Jul 14 21:57:10.053981 systemd[1]: Stopping sysroot-boot.service... Jul 14 21:57:10.054664 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 14 21:57:10.054793 systemd[1]: Stopped systemd-udev-trigger.service. Jul 14 21:57:10.061327 ignition[895]: INFO : Ignition 2.14.0 Jul 14 21:57:10.061327 ignition[895]: INFO : Stage: umount Jul 14 21:57:10.061327 ignition[895]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 14 21:57:10.061327 ignition[895]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 14 21:57:10.055000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.057000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.059000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.063000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.063000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.056083 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 14 21:57:10.056169 systemd[1]: Stopped dracut-pre-trigger.service. Jul 14 21:57:10.068944 ignition[895]: INFO : umount: umount passed Jul 14 21:57:10.068944 ignition[895]: INFO : Ignition finished successfully Jul 14 21:57:10.068000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.058628 systemd[1]: iscsid.service: Deactivated successfully. Jul 14 21:57:10.071000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.058721 systemd[1]: Stopped iscsid.service. Jul 14 21:57:10.060081 systemd[1]: iscsid.socket: Deactivated successfully. Jul 14 21:57:10.060141 systemd[1]: Closed iscsid.socket. Jul 14 21:57:10.076000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.061950 systemd[1]: Stopping iscsiuio.service... Jul 14 21:57:10.078000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.063660 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 14 21:57:10.080000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.063726 systemd[1]: Finished initrd-cleanup.service. Jul 14 21:57:10.066642 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 14 21:57:10.068518 systemd[1]: Stopped iscsiuio.service. Jul 14 21:57:10.084000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.070307 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 14 21:57:10.085000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.070381 systemd[1]: Stopped ignition-mount.service. Jul 14 21:57:10.072575 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 14 21:57:10.072823 systemd[1]: Stopped target network.target. Jul 14 21:57:10.075036 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 14 21:57:10.089000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.075069 systemd[1]: Closed iscsiuio.socket. Jul 14 21:57:10.089000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.076296 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 14 21:57:10.076335 systemd[1]: Stopped ignition-disks.service. Jul 14 21:57:10.077892 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 14 21:57:10.094000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.077933 systemd[1]: Stopped ignition-kargs.service. Jul 14 21:57:10.096000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.079055 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 14 21:57:10.096000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.079089 systemd[1]: Stopped ignition-setup.service. Jul 14 21:57:10.080325 systemd[1]: Stopping systemd-networkd.service... Jul 14 21:57:10.081734 systemd[1]: Stopping systemd-resolved.service... Jul 14 21:57:10.083003 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 14 21:57:10.100000 audit: BPF prog-id=6 op=UNLOAD Jul 14 21:57:10.083082 systemd[1]: Stopped sysroot-boot.service. Jul 14 21:57:10.084259 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 14 21:57:10.103000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.084296 systemd[1]: Stopped initrd-setup-root.service. Jul 14 21:57:10.087909 systemd-networkd[738]: eth0: DHCPv6 lease lost Jul 14 21:57:10.106000 audit: BPF prog-id=9 op=UNLOAD Jul 14 21:57:10.106000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.087996 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 14 21:57:10.088082 systemd[1]: Stopped systemd-resolved.service. Jul 14 21:57:10.089673 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 14 21:57:10.111000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.089747 systemd[1]: Stopped systemd-networkd.service. Jul 14 21:57:10.111000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.090976 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 14 21:57:10.113000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.091009 systemd[1]: Closed systemd-networkd.socket. Jul 14 21:57:10.092514 systemd[1]: Stopping network-cleanup.service... Jul 14 21:57:10.116000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.093310 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 14 21:57:10.118000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.093366 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 14 21:57:10.120000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.094852 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 14 21:57:10.094911 systemd[1]: Stopped systemd-sysctl.service. Jul 14 21:57:10.122000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.122000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.096975 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 14 21:57:10.097022 systemd[1]: Stopped systemd-modules-load.service. Jul 14 21:57:10.097950 systemd[1]: Stopping systemd-udevd.service... Jul 14 21:57:10.100417 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 14 21:57:10.102799 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 14 21:57:10.102908 systemd[1]: Stopped network-cleanup.service. Jul 14 21:57:10.105680 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 14 21:57:10.105800 systemd[1]: Stopped systemd-udevd.service. Jul 14 21:57:10.107262 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 14 21:57:10.107295 systemd[1]: Closed systemd-udevd-control.socket. Jul 14 21:57:10.108380 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 14 21:57:10.108410 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 14 21:57:10.109819 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 14 21:57:10.109885 systemd[1]: Stopped dracut-pre-udev.service. Jul 14 21:57:10.111179 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 14 21:57:10.111216 systemd[1]: Stopped dracut-cmdline.service. Jul 14 21:57:10.112614 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 14 21:57:10.112651 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 14 21:57:10.114576 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 14 21:57:10.115555 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Jul 14 21:57:10.115607 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Jul 14 21:57:10.117628 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 14 21:57:10.117668 systemd[1]: Stopped kmod-static-nodes.service. Jul 14 21:57:10.118624 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 14 21:57:10.118661 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 14 21:57:10.120958 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Jul 14 21:57:10.121340 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 14 21:57:10.121417 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 14 21:57:10.122723 systemd[1]: Reached target initrd-switch-root.target. Jul 14 21:57:10.124621 systemd[1]: Starting initrd-switch-root.service... Jul 14 21:57:10.152001 systemd-journald[290]: Received SIGTERM from PID 1 (systemd). Jul 14 21:57:10.130826 systemd[1]: Switching root. Jul 14 21:57:10.152559 systemd-journald[290]: Journal stopped Jul 14 21:57:12.077687 kernel: SELinux: Class mctp_socket not defined in policy. Jul 14 21:57:12.077738 kernel: SELinux: Class anon_inode not defined in policy. Jul 14 21:57:12.077757 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 14 21:57:12.077767 kernel: SELinux: policy capability network_peer_controls=1 Jul 14 21:57:12.077779 kernel: SELinux: policy capability open_perms=1 Jul 14 21:57:12.077789 kernel: SELinux: policy capability extended_socket_class=1 Jul 14 21:57:12.077799 kernel: SELinux: policy capability always_check_network=0 Jul 14 21:57:12.077812 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 14 21:57:12.077822 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 14 21:57:12.077847 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 14 21:57:12.077857 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 14 21:57:12.077900 systemd[1]: Successfully loaded SELinux policy in 36.159ms. Jul 14 21:57:12.077917 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 8.959ms. Jul 14 21:57:12.077931 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 14 21:57:12.077942 systemd[1]: Detected virtualization kvm. Jul 14 21:57:12.077953 systemd[1]: Detected architecture arm64. Jul 14 21:57:12.077963 systemd[1]: Detected first boot. Jul 14 21:57:12.077973 systemd[1]: Initializing machine ID from VM UUID. Jul 14 21:57:12.077985 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 14 21:57:12.077995 systemd[1]: Populated /etc with preset unit settings. Jul 14 21:57:12.078006 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 14 21:57:12.078018 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 14 21:57:12.078030 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 14 21:57:12.078041 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 14 21:57:12.078053 systemd[1]: Stopped initrd-switch-root.service. Jul 14 21:57:12.078063 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 14 21:57:12.078074 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 14 21:57:12.078085 systemd[1]: Created slice system-addon\x2drun.slice. Jul 14 21:57:12.078096 systemd[1]: Created slice system-getty.slice. Jul 14 21:57:12.078106 systemd[1]: Created slice system-modprobe.slice. Jul 14 21:57:12.078117 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 14 21:57:12.078127 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 14 21:57:12.078139 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 14 21:57:12.078149 systemd[1]: Created slice user.slice. Jul 14 21:57:12.078159 systemd[1]: Started systemd-ask-password-console.path. Jul 14 21:57:12.078170 systemd[1]: Started systemd-ask-password-wall.path. Jul 14 21:57:12.078180 systemd[1]: Set up automount boot.automount. Jul 14 21:57:12.078191 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 14 21:57:12.078201 systemd[1]: Stopped target initrd-switch-root.target. Jul 14 21:57:12.078212 systemd[1]: Stopped target initrd-fs.target. Jul 14 21:57:12.078222 systemd[1]: Stopped target initrd-root-fs.target. Jul 14 21:57:12.078234 systemd[1]: Reached target integritysetup.target. Jul 14 21:57:12.078244 systemd[1]: Reached target remote-cryptsetup.target. Jul 14 21:57:12.078256 systemd[1]: Reached target remote-fs.target. Jul 14 21:57:12.078266 systemd[1]: Reached target slices.target. Jul 14 21:57:12.078276 systemd[1]: Reached target swap.target. Jul 14 21:57:12.078287 systemd[1]: Reached target torcx.target. Jul 14 21:57:12.078298 systemd[1]: Reached target veritysetup.target. Jul 14 21:57:12.078308 systemd[1]: Listening on systemd-coredump.socket. Jul 14 21:57:12.078319 systemd[1]: Listening on systemd-initctl.socket. Jul 14 21:57:12.078330 systemd[1]: Listening on systemd-networkd.socket. Jul 14 21:57:12.078340 systemd[1]: Listening on systemd-udevd-control.socket. Jul 14 21:57:12.078351 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 14 21:57:12.078361 systemd[1]: Listening on systemd-userdbd.socket. Jul 14 21:57:12.078371 systemd[1]: Mounting dev-hugepages.mount... Jul 14 21:57:12.078382 systemd[1]: Mounting dev-mqueue.mount... Jul 14 21:57:12.078392 systemd[1]: Mounting media.mount... Jul 14 21:57:12.078402 systemd[1]: Mounting sys-kernel-debug.mount... Jul 14 21:57:12.078412 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 14 21:57:12.078424 systemd[1]: Mounting tmp.mount... Jul 14 21:57:12.078434 systemd[1]: Starting flatcar-tmpfiles.service... Jul 14 21:57:12.078444 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 14 21:57:12.078454 systemd[1]: Starting kmod-static-nodes.service... Jul 14 21:57:12.078465 systemd[1]: Starting modprobe@configfs.service... Jul 14 21:57:12.078475 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 21:57:12.078485 systemd[1]: Starting modprobe@drm.service... Jul 14 21:57:12.078496 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 21:57:12.078507 systemd[1]: Starting modprobe@fuse.service... Jul 14 21:57:12.078518 systemd[1]: Starting modprobe@loop.service... Jul 14 21:57:12.078529 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 14 21:57:12.078539 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 14 21:57:12.078550 systemd[1]: Stopped systemd-fsck-root.service. Jul 14 21:57:12.078559 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 14 21:57:12.078571 systemd[1]: Stopped systemd-fsck-usr.service. Jul 14 21:57:12.078581 systemd[1]: Stopped systemd-journald.service. Jul 14 21:57:12.078591 kernel: fuse: init (API version 7.34) Jul 14 21:57:12.078602 kernel: loop: module loaded Jul 14 21:57:12.078613 systemd[1]: Starting systemd-journald.service... Jul 14 21:57:12.078624 systemd[1]: Starting systemd-modules-load.service... Jul 14 21:57:12.078635 systemd[1]: Starting systemd-network-generator.service... Jul 14 21:57:12.078645 systemd[1]: Starting systemd-remount-fs.service... Jul 14 21:57:12.078655 systemd[1]: Starting systemd-udev-trigger.service... Jul 14 21:57:12.078666 systemd[1]: verity-setup.service: Deactivated successfully. Jul 14 21:57:12.078676 systemd[1]: Stopped verity-setup.service. Jul 14 21:57:12.078686 systemd[1]: Mounted dev-hugepages.mount. Jul 14 21:57:12.078696 systemd[1]: Mounted dev-mqueue.mount. Jul 14 21:57:12.078706 systemd[1]: Mounted media.mount. Jul 14 21:57:12.078719 systemd-journald[990]: Journal started Jul 14 21:57:12.078761 systemd-journald[990]: Runtime Journal (/run/log/journal/5c14cdb76a2a49dbadb517d8bd15ad51) is 6.0M, max 48.7M, 42.6M free. Jul 14 21:57:10.209000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 14 21:57:10.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 14 21:57:10.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 14 21:57:10.253000 audit: BPF prog-id=10 op=LOAD Jul 14 21:57:10.253000 audit: BPF prog-id=10 op=UNLOAD Jul 14 21:57:10.253000 audit: BPF prog-id=11 op=LOAD Jul 14 21:57:10.253000 audit: BPF prog-id=11 op=UNLOAD Jul 14 21:57:10.294000 audit[928]: AVC avc: denied { associate } for pid=928 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 14 21:57:10.294000 audit[928]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=400018b8e4 a1=4000028e40 a2=4000027080 a3=32 items=0 ppid=911 pid=928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:10.294000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 14 21:57:10.296000 audit[928]: AVC avc: denied { associate } for pid=928 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 14 21:57:10.296000 audit[928]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=400018b9b9 a2=1ed a3=0 items=2 ppid=911 pid=928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:10.296000 audit: CWD cwd="/" Jul 14 21:57:10.296000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 21:57:10.296000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 21:57:10.296000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 14 21:57:11.952000 audit: BPF prog-id=12 op=LOAD Jul 14 21:57:11.952000 audit: BPF prog-id=3 op=UNLOAD Jul 14 21:57:11.952000 audit: BPF prog-id=13 op=LOAD Jul 14 21:57:11.953000 audit: BPF prog-id=14 op=LOAD Jul 14 21:57:11.953000 audit: BPF prog-id=4 op=UNLOAD Jul 14 21:57:11.953000 audit: BPF prog-id=5 op=UNLOAD Jul 14 21:57:11.954000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:11.956000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:11.956000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:11.961000 audit: BPF prog-id=12 op=UNLOAD Jul 14 21:57:12.045000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.046000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.049000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.049000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.052000 audit: BPF prog-id=15 op=LOAD Jul 14 21:57:12.055000 audit: BPF prog-id=16 op=LOAD Jul 14 21:57:12.055000 audit: BPF prog-id=17 op=LOAD Jul 14 21:57:12.055000 audit: BPF prog-id=13 op=UNLOAD Jul 14 21:57:12.055000 audit: BPF prog-id=14 op=UNLOAD Jul 14 21:57:12.072000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.076000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 14 21:57:12.076000 audit[990]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=6 a1=ffffe7478250 a2=4000 a3=1 items=0 ppid=1 pid=990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:12.076000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 14 21:57:11.951772 systemd[1]: Queued start job for default target multi-user.target. Jul 14 21:57:10.293912 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-14T21:57:10Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.101 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.101 /var/lib/torcx/store]" Jul 14 21:57:11.951785 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 14 21:57:10.294178 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-14T21:57:10Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 14 21:57:11.954510 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 14 21:57:10.294197 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-14T21:57:10Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 14 21:57:10.294225 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-14T21:57:10Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 14 21:57:10.294235 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-14T21:57:10Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 14 21:57:12.080295 systemd[1]: Started systemd-journald.service. Jul 14 21:57:10.294264 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-14T21:57:10Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 14 21:57:10.294276 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-14T21:57:10Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 14 21:57:12.080000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:10.294461 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-14T21:57:10Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 14 21:57:10.294494 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-14T21:57:10Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 14 21:57:10.294505 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-14T21:57:10Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 14 21:57:10.295233 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-14T21:57:10Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 14 21:57:12.080668 systemd[1]: Mounted sys-kernel-debug.mount. Jul 14 21:57:10.295266 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-14T21:57:10Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 14 21:57:10.295283 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-14T21:57:10Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.101: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.101 Jul 14 21:57:10.295295 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-14T21:57:10Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 14 21:57:10.295313 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-14T21:57:10Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.101: no such file or directory" path=/var/lib/torcx/store/3510.3.101 Jul 14 21:57:10.295325 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-14T21:57:10Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 14 21:57:11.709262 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-14T21:57:11Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 14 21:57:11.709525 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-14T21:57:11Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 14 21:57:11.709639 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-14T21:57:11Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 14 21:57:11.709799 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-14T21:57:11Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 14 21:57:11.709887 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-14T21:57:11Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 14 21:57:11.709952 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-14T21:57:11Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 14 21:57:12.081752 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 14 21:57:12.082623 systemd[1]: Mounted tmp.mount. Jul 14 21:57:12.083608 systemd[1]: Finished kmod-static-nodes.service. Jul 14 21:57:12.084000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.084626 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 14 21:57:12.085000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.085000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.085442 systemd[1]: Finished modprobe@configfs.service. Jul 14 21:57:12.086000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.086000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.086541 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 21:57:12.086700 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 21:57:12.087738 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 14 21:57:12.088132 systemd[1]: Finished modprobe@drm.service. Jul 14 21:57:12.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.088000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.089149 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 21:57:12.089302 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 21:57:12.089000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.089000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.090387 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 14 21:57:12.090540 systemd[1]: Finished modprobe@fuse.service. Jul 14 21:57:12.090000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.090000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.091544 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 21:57:12.091692 systemd[1]: Finished modprobe@loop.service. Jul 14 21:57:12.091000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.091000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.092960 systemd[1]: Finished systemd-modules-load.service. Jul 14 21:57:12.092000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.094100 systemd[1]: Finished systemd-network-generator.service. Jul 14 21:57:12.094000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.095295 systemd[1]: Finished systemd-remount-fs.service. Jul 14 21:57:12.095000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.096527 systemd[1]: Reached target network-pre.target. Jul 14 21:57:12.098472 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 14 21:57:12.100455 systemd[1]: Mounting sys-kernel-config.mount... Jul 14 21:57:12.101360 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 14 21:57:12.103852 systemd[1]: Starting systemd-hwdb-update.service... Jul 14 21:57:12.105774 systemd[1]: Starting systemd-journal-flush.service... Jul 14 21:57:12.106755 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 14 21:57:12.107901 systemd[1]: Starting systemd-random-seed.service... Jul 14 21:57:12.108749 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 14 21:57:12.114516 systemd[1]: Starting systemd-sysctl.service... Jul 14 21:57:12.115229 systemd-journald[990]: Time spent on flushing to /var/log/journal/5c14cdb76a2a49dbadb517d8bd15ad51 is 17.772ms for 988 entries. Jul 14 21:57:12.115229 systemd-journald[990]: System Journal (/var/log/journal/5c14cdb76a2a49dbadb517d8bd15ad51) is 8.0M, max 195.6M, 187.6M free. Jul 14 21:57:12.142017 systemd-journald[990]: Received client request to flush runtime journal. Jul 14 21:57:12.118000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.121000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.126000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.138000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.118130 systemd[1]: Finished flatcar-tmpfiles.service. Jul 14 21:57:12.119225 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 14 21:57:12.120169 systemd[1]: Mounted sys-kernel-config.mount. Jul 14 21:57:12.142659 udevadm[1029]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Jul 14 21:57:12.121167 systemd[1]: Finished systemd-random-seed.service. Jul 14 21:57:12.122197 systemd[1]: Reached target first-boot-complete.target. Jul 14 21:57:12.124221 systemd[1]: Starting systemd-sysusers.service... Jul 14 21:57:12.126455 systemd[1]: Finished systemd-udev-trigger.service. Jul 14 21:57:12.128547 systemd[1]: Starting systemd-udev-settle.service... Jul 14 21:57:12.138068 systemd[1]: Finished systemd-sysctl.service. Jul 14 21:57:12.144341 systemd[1]: Finished systemd-journal-flush.service. Jul 14 21:57:12.144000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.145623 systemd[1]: Finished systemd-sysusers.service. Jul 14 21:57:12.145000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.147592 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 14 21:57:12.168740 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 14 21:57:12.168000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.497452 systemd[1]: Finished systemd-hwdb-update.service. Jul 14 21:57:12.498000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.498000 audit: BPF prog-id=18 op=LOAD Jul 14 21:57:12.498000 audit: BPF prog-id=19 op=LOAD Jul 14 21:57:12.498000 audit: BPF prog-id=7 op=UNLOAD Jul 14 21:57:12.498000 audit: BPF prog-id=8 op=UNLOAD Jul 14 21:57:12.499709 systemd[1]: Starting systemd-udevd.service... Jul 14 21:57:12.522896 systemd-udevd[1035]: Using default interface naming scheme 'v252'. Jul 14 21:57:12.549839 systemd[1]: Started systemd-udevd.service. Jul 14 21:57:12.549000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.551000 audit: BPF prog-id=20 op=LOAD Jul 14 21:57:12.554958 systemd[1]: Starting systemd-networkd.service... Jul 14 21:57:12.558000 audit: BPF prog-id=21 op=LOAD Jul 14 21:57:12.558000 audit: BPF prog-id=22 op=LOAD Jul 14 21:57:12.558000 audit: BPF prog-id=23 op=LOAD Jul 14 21:57:12.559669 systemd[1]: Starting systemd-userdbd.service... Jul 14 21:57:12.578285 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Jul 14 21:57:12.585734 systemd[1]: Started systemd-userdbd.service. Jul 14 21:57:12.585000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.590818 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 14 21:57:12.655453 systemd-networkd[1047]: lo: Link UP Jul 14 21:57:12.655466 systemd-networkd[1047]: lo: Gained carrier Jul 14 21:57:12.655813 systemd-networkd[1047]: Enumeration completed Jul 14 21:57:12.655940 systemd[1]: Started systemd-networkd.service. Jul 14 21:57:12.655947 systemd-networkd[1047]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 14 21:57:12.656000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.657074 systemd-networkd[1047]: eth0: Link UP Jul 14 21:57:12.657078 systemd-networkd[1047]: eth0: Gained carrier Jul 14 21:57:12.657325 systemd[1]: Finished systemd-udev-settle.service. Jul 14 21:57:12.657000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.659396 systemd[1]: Starting lvm2-activation-early.service... Jul 14 21:57:12.668559 lvm[1068]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 14 21:57:12.682017 systemd-networkd[1047]: eth0: DHCPv4 address 10.0.0.76/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 14 21:57:12.692878 systemd[1]: Finished lvm2-activation-early.service. Jul 14 21:57:12.692000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.693887 systemd[1]: Reached target cryptsetup.target. Jul 14 21:57:12.695851 systemd[1]: Starting lvm2-activation.service... Jul 14 21:57:12.699450 lvm[1069]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 14 21:57:12.729720 systemd[1]: Finished lvm2-activation.service. Jul 14 21:57:12.729000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.730672 systemd[1]: Reached target local-fs-pre.target. Jul 14 21:57:12.731557 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 14 21:57:12.731586 systemd[1]: Reached target local-fs.target. Jul 14 21:57:12.732360 systemd[1]: Reached target machines.target. Jul 14 21:57:12.734460 systemd[1]: Starting ldconfig.service... Jul 14 21:57:12.736081 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 21:57:12.736137 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 21:57:12.737135 systemd[1]: Starting systemd-boot-update.service... Jul 14 21:57:12.738988 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 14 21:57:12.741737 systemd[1]: Starting systemd-machine-id-commit.service... Jul 14 21:57:12.743928 systemd[1]: Starting systemd-sysext.service... Jul 14 21:57:12.746550 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1071 (bootctl) Jul 14 21:57:12.747545 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 14 21:57:12.755771 systemd[1]: Unmounting usr-share-oem.mount... Jul 14 21:57:12.765752 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 14 21:57:12.766000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.772434 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 14 21:57:12.772629 systemd[1]: Unmounted usr-share-oem.mount. Jul 14 21:57:12.789625 kernel: loop0: detected capacity change from 0 to 203944 Jul 14 21:57:12.886348 systemd[1]: Finished systemd-machine-id-commit.service. Jul 14 21:57:12.886000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.889486 systemd-fsck[1079]: fsck.fat 4.2 (2021-01-31) Jul 14 21:57:12.889486 systemd-fsck[1079]: /dev/vda1: 236 files, 117310/258078 clusters Jul 14 21:57:12.891284 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 14 21:57:12.893000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.897880 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 14 21:57:12.921916 kernel: loop1: detected capacity change from 0 to 203944 Jul 14 21:57:12.931945 (sd-sysext)[1083]: Using extensions 'kubernetes'. Jul 14 21:57:12.932315 (sd-sysext)[1083]: Merged extensions into '/usr'. Jul 14 21:57:12.948292 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 14 21:57:12.949488 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 21:57:12.952274 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 21:57:12.954257 systemd[1]: Starting modprobe@loop.service... Jul 14 21:57:12.955131 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 21:57:12.955268 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 21:57:12.956023 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 21:57:12.956145 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 21:57:12.956000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.956000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.957378 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 21:57:12.957488 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 21:57:12.958000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.958000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.959207 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 21:57:12.959311 systemd[1]: Finished modprobe@loop.service. Jul 14 21:57:12.958000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.958000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:12.960552 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 14 21:57:12.960644 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 14 21:57:13.062759 ldconfig[1070]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 14 21:57:13.066170 systemd[1]: Finished ldconfig.service. Jul 14 21:57:13.066000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.074249 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 14 21:57:13.076033 systemd[1]: Mounting boot.mount... Jul 14 21:57:13.078323 systemd[1]: Mounting usr-share-oem.mount... Jul 14 21:57:13.082497 systemd[1]: Mounted usr-share-oem.mount. Jul 14 21:57:13.084356 systemd[1]: Finished systemd-sysext.service. Jul 14 21:57:13.084000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.086479 systemd[1]: Starting ensure-sysext.service... Jul 14 21:57:13.088146 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 14 21:57:13.092624 systemd[1]: Mounted boot.mount. Jul 14 21:57:13.094970 systemd[1]: Reloading. Jul 14 21:57:13.101600 systemd-tmpfiles[1091]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 14 21:57:13.102528 systemd-tmpfiles[1091]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 14 21:57:13.103997 systemd-tmpfiles[1091]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 14 21:57:13.127844 /usr/lib/systemd/system-generators/torcx-generator[1111]: time="2025-07-14T21:57:13Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.101 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.101 /var/lib/torcx/store]" Jul 14 21:57:13.127912 /usr/lib/systemd/system-generators/torcx-generator[1111]: time="2025-07-14T21:57:13Z" level=info msg="torcx already run" Jul 14 21:57:13.193387 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 14 21:57:13.193410 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 14 21:57:13.209300 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 14 21:57:13.249000 audit: BPF prog-id=24 op=LOAD Jul 14 21:57:13.249000 audit: BPF prog-id=25 op=LOAD Jul 14 21:57:13.249000 audit: BPF prog-id=18 op=UNLOAD Jul 14 21:57:13.249000 audit: BPF prog-id=19 op=UNLOAD Jul 14 21:57:13.250000 audit: BPF prog-id=26 op=LOAD Jul 14 21:57:13.250000 audit: BPF prog-id=21 op=UNLOAD Jul 14 21:57:13.250000 audit: BPF prog-id=27 op=LOAD Jul 14 21:57:13.250000 audit: BPF prog-id=28 op=LOAD Jul 14 21:57:13.250000 audit: BPF prog-id=22 op=UNLOAD Jul 14 21:57:13.250000 audit: BPF prog-id=23 op=UNLOAD Jul 14 21:57:13.251000 audit: BPF prog-id=29 op=LOAD Jul 14 21:57:13.251000 audit: BPF prog-id=20 op=UNLOAD Jul 14 21:57:13.251000 audit: BPF prog-id=30 op=LOAD Jul 14 21:57:13.251000 audit: BPF prog-id=15 op=UNLOAD Jul 14 21:57:13.251000 audit: BPF prog-id=31 op=LOAD Jul 14 21:57:13.251000 audit: BPF prog-id=32 op=LOAD Jul 14 21:57:13.252000 audit: BPF prog-id=16 op=UNLOAD Jul 14 21:57:13.252000 audit: BPF prog-id=17 op=UNLOAD Jul 14 21:57:13.256074 systemd[1]: Finished systemd-boot-update.service. Jul 14 21:57:13.256000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.258088 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 14 21:57:13.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.262243 systemd[1]: Starting audit-rules.service... Jul 14 21:57:13.264233 systemd[1]: Starting clean-ca-certificates.service... Jul 14 21:57:13.266213 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 14 21:57:13.269000 audit: BPF prog-id=33 op=LOAD Jul 14 21:57:13.271249 systemd[1]: Starting systemd-resolved.service... Jul 14 21:57:13.271000 audit: BPF prog-id=34 op=LOAD Jul 14 21:57:13.273898 systemd[1]: Starting systemd-timesyncd.service... Jul 14 21:57:13.275766 systemd[1]: Starting systemd-update-utmp.service... Jul 14 21:57:13.277096 systemd[1]: Finished clean-ca-certificates.service. Jul 14 21:57:13.277000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.280037 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 14 21:57:13.284000 audit[1160]: SYSTEM_BOOT pid=1160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.288027 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 14 21:57:13.289316 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 21:57:13.291189 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 21:57:13.293030 systemd[1]: Starting modprobe@loop.service... Jul 14 21:57:13.293761 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 21:57:13.293990 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 21:57:13.294122 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 14 21:57:13.295287 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 14 21:57:13.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.296652 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 21:57:13.296765 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 21:57:13.297000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.297000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.298027 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 21:57:13.298138 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 21:57:13.298000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.298000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.299381 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 21:57:13.299488 systemd[1]: Finished modprobe@loop.service. Jul 14 21:57:13.300000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.300000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.302350 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 14 21:57:13.303597 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 21:57:13.305497 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 21:57:13.307394 systemd[1]: Starting modprobe@loop.service... Jul 14 21:57:13.308128 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 21:57:13.308254 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 21:57:13.309478 systemd[1]: Starting systemd-update-done.service... Jul 14 21:57:13.310328 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 14 21:57:13.311260 systemd[1]: Finished systemd-update-utmp.service. Jul 14 21:57:13.311000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.312547 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 21:57:13.312656 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 21:57:13.313000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.313000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.313873 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 21:57:13.314000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.314000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.313985 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 21:57:13.315181 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 21:57:13.315283 systemd[1]: Finished modprobe@loop.service. Jul 14 21:57:13.315000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.315000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.317252 systemd[1]: Finished systemd-update-done.service. Jul 14 21:57:13.317000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.320247 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 14 21:57:13.321512 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 21:57:13.324217 systemd[1]: Starting modprobe@drm.service... Jul 14 21:57:13.326254 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 21:57:13.328273 systemd[1]: Starting modprobe@loop.service... Jul 14 21:57:13.329100 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 21:57:13.329254 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 21:57:13.332430 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 14 21:57:13.333503 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 14 21:57:13.334656 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 21:57:13.334782 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 21:57:13.335000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.335000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.336008 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 14 21:57:13.336120 systemd[1]: Finished modprobe@drm.service. Jul 14 21:57:13.336000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.336000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.337265 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 21:57:13.337376 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 21:57:13.338000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.338000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.339000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.339000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.338567 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 21:57:13.338669 systemd[1]: Finished modprobe@loop.service. Jul 14 21:57:13.339789 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 14 21:57:13.339919 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 14 21:57:13.344450 systemd[1]: Finished ensure-sysext.service. Jul 14 21:57:13.345000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:13.348234 systemd[1]: Started systemd-timesyncd.service. Jul 14 21:57:13.348881 augenrules[1182]: No rules Jul 14 21:57:13.348000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 14 21:57:13.348000 audit[1182]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd225a080 a2=420 a3=0 items=0 ppid=1149 pid=1182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:13.348000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 14 21:57:13.350034 systemd-resolved[1155]: Positive Trust Anchors: Jul 14 21:57:13.350241 systemd-resolved[1155]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 14 21:57:13.350320 systemd-resolved[1155]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 14 21:57:13.350526 systemd-timesyncd[1159]: Contacted time server 10.0.0.1:123 (10.0.0.1). Jul 14 21:57:13.350586 systemd-timesyncd[1159]: Initial clock synchronization to Mon 2025-07-14 21:57:13.039468 UTC. Jul 14 21:57:13.350847 systemd[1]: Finished audit-rules.service. Jul 14 21:57:13.351761 systemd[1]: Reached target time-set.target. Jul 14 21:57:13.370927 systemd-resolved[1155]: Defaulting to hostname 'linux'. Jul 14 21:57:13.372884 systemd[1]: Started systemd-resolved.service. Jul 14 21:57:13.373698 systemd[1]: Reached target network.target. Jul 14 21:57:13.374495 systemd[1]: Reached target nss-lookup.target. Jul 14 21:57:13.375285 systemd[1]: Reached target sysinit.target. Jul 14 21:57:13.376100 systemd[1]: Started motdgen.path. Jul 14 21:57:13.376780 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 14 21:57:13.378016 systemd[1]: Started logrotate.timer. Jul 14 21:57:13.378813 systemd[1]: Started mdadm.timer. Jul 14 21:57:13.379519 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 14 21:57:13.380349 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 14 21:57:13.380383 systemd[1]: Reached target paths.target. Jul 14 21:57:13.381093 systemd[1]: Reached target timers.target. Jul 14 21:57:13.382128 systemd[1]: Listening on dbus.socket. Jul 14 21:57:13.383831 systemd[1]: Starting docker.socket... Jul 14 21:57:13.388161 systemd[1]: Listening on sshd.socket. Jul 14 21:57:13.389013 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 21:57:13.389456 systemd[1]: Listening on docker.socket. Jul 14 21:57:13.390277 systemd[1]: Reached target sockets.target. Jul 14 21:57:13.391012 systemd[1]: Reached target basic.target. Jul 14 21:57:13.391752 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 14 21:57:13.391785 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 14 21:57:13.392770 systemd[1]: Starting containerd.service... Jul 14 21:57:13.394501 systemd[1]: Starting dbus.service... Jul 14 21:57:13.396119 systemd[1]: Starting enable-oem-cloudinit.service... Jul 14 21:57:13.397968 systemd[1]: Starting extend-filesystems.service... Jul 14 21:57:13.398840 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 14 21:57:13.400027 systemd[1]: Starting motdgen.service... Jul 14 21:57:13.407170 systemd[1]: Starting prepare-helm.service... Jul 14 21:57:13.409205 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 14 21:57:13.410895 jq[1192]: false Jul 14 21:57:13.411975 systemd[1]: Starting sshd-keygen.service... Jul 14 21:57:13.418031 systemd[1]: Starting systemd-logind.service... Jul 14 21:57:13.418772 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 21:57:13.418876 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 14 21:57:13.420041 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 14 21:57:13.420751 systemd[1]: Starting update-engine.service... Jul 14 21:57:13.422909 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 14 21:57:13.425462 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 14 21:57:13.425645 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 14 21:57:13.426691 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 14 21:57:13.426909 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 14 21:57:13.427687 jq[1209]: true Jul 14 21:57:13.428346 systemd[1]: motdgen.service: Deactivated successfully. Jul 14 21:57:13.428520 systemd[1]: Finished motdgen.service. Jul 14 21:57:13.430377 extend-filesystems[1193]: Found loop1 Jul 14 21:57:13.431632 extend-filesystems[1193]: Found vda Jul 14 21:57:13.431632 extend-filesystems[1193]: Found vda1 Jul 14 21:57:13.431632 extend-filesystems[1193]: Found vda2 Jul 14 21:57:13.431632 extend-filesystems[1193]: Found vda3 Jul 14 21:57:13.431632 extend-filesystems[1193]: Found usr Jul 14 21:57:13.431632 extend-filesystems[1193]: Found vda4 Jul 14 21:57:13.431632 extend-filesystems[1193]: Found vda6 Jul 14 21:57:13.431632 extend-filesystems[1193]: Found vda7 Jul 14 21:57:13.431632 extend-filesystems[1193]: Found vda9 Jul 14 21:57:13.431632 extend-filesystems[1193]: Checking size of /dev/vda9 Jul 14 21:57:13.450896 tar[1211]: linux-arm64/helm Jul 14 21:57:13.451261 jq[1216]: true Jul 14 21:57:13.464449 extend-filesystems[1193]: Resized partition /dev/vda9 Jul 14 21:57:13.469556 systemd-logind[1206]: Watching system buttons on /dev/input/event0 (Power Button) Jul 14 21:57:13.470562 extend-filesystems[1231]: resize2fs 1.46.5 (30-Dec-2021) Jul 14 21:57:13.470516 systemd-logind[1206]: New seat seat0. Jul 14 21:57:13.477125 dbus-daemon[1191]: [system] SELinux support is enabled Jul 14 21:57:13.477335 systemd[1]: Started dbus.service. Jul 14 21:57:13.481124 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Jul 14 21:57:13.481054 dbus-daemon[1191]: [system] Successfully activated service 'org.freedesktop.systemd1' Jul 14 21:57:13.480496 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 14 21:57:13.480522 systemd[1]: Reached target system-config.target. Jul 14 21:57:13.481556 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 14 21:57:13.481580 systemd[1]: Reached target user-config.target. Jul 14 21:57:13.482569 systemd[1]: Started systemd-logind.service. Jul 14 21:57:13.503287 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Jul 14 21:57:13.523161 extend-filesystems[1231]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 14 21:57:13.523161 extend-filesystems[1231]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 14 21:57:13.523161 extend-filesystems[1231]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Jul 14 21:57:13.528188 extend-filesystems[1193]: Resized filesystem in /dev/vda9 Jul 14 21:57:13.524164 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 14 21:57:13.524319 systemd[1]: Finished extend-filesystems.service. Jul 14 21:57:13.534429 bash[1242]: Updated "/home/core/.ssh/authorized_keys" Jul 14 21:57:13.535175 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 14 21:57:13.541585 update_engine[1208]: I0714 21:57:13.541384 1208 main.cc:92] Flatcar Update Engine starting Jul 14 21:57:13.543639 systemd[1]: Started update-engine.service. Jul 14 21:57:13.543804 update_engine[1208]: I0714 21:57:13.543663 1208 update_check_scheduler.cc:74] Next update check in 8m10s Jul 14 21:57:13.546305 systemd[1]: Started locksmithd.service. Jul 14 21:57:13.554921 env[1213]: time="2025-07-14T21:57:13.554804320Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 14 21:57:13.577552 env[1213]: time="2025-07-14T21:57:13.577466080Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 14 21:57:13.577644 env[1213]: time="2025-07-14T21:57:13.577622120Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 14 21:57:13.579212 env[1213]: time="2025-07-14T21:57:13.579169560Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.187-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 14 21:57:13.579247 env[1213]: time="2025-07-14T21:57:13.579213760Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 14 21:57:13.579462 env[1213]: time="2025-07-14T21:57:13.579435160Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 14 21:57:13.579505 env[1213]: time="2025-07-14T21:57:13.579460760Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 14 21:57:13.579505 env[1213]: time="2025-07-14T21:57:13.579478960Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 14 21:57:13.579505 env[1213]: time="2025-07-14T21:57:13.579489560Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 14 21:57:13.579591 env[1213]: time="2025-07-14T21:57:13.579573080Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 14 21:57:13.579982 env[1213]: time="2025-07-14T21:57:13.579959760Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 14 21:57:13.580139 env[1213]: time="2025-07-14T21:57:13.580117040Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 14 21:57:13.580139 env[1213]: time="2025-07-14T21:57:13.580137760Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 14 21:57:13.580222 env[1213]: time="2025-07-14T21:57:13.580199560Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 14 21:57:13.580222 env[1213]: time="2025-07-14T21:57:13.580219880Z" level=info msg="metadata content store policy set" policy=shared Jul 14 21:57:13.583979 env[1213]: time="2025-07-14T21:57:13.583950880Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 14 21:57:13.584038 env[1213]: time="2025-07-14T21:57:13.583983920Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 14 21:57:13.584038 env[1213]: time="2025-07-14T21:57:13.584002520Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 14 21:57:13.584092 env[1213]: time="2025-07-14T21:57:13.584044720Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 14 21:57:13.584092 env[1213]: time="2025-07-14T21:57:13.584066240Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 14 21:57:13.584092 env[1213]: time="2025-07-14T21:57:13.584079680Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 14 21:57:13.584164 env[1213]: time="2025-07-14T21:57:13.584145120Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 14 21:57:13.584637 env[1213]: time="2025-07-14T21:57:13.584618160Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 14 21:57:13.584759 env[1213]: time="2025-07-14T21:57:13.584741520Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 14 21:57:13.584794 env[1213]: time="2025-07-14T21:57:13.584762720Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 14 21:57:13.584794 env[1213]: time="2025-07-14T21:57:13.584776000Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 14 21:57:13.584794 env[1213]: time="2025-07-14T21:57:13.584788440Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 14 21:57:13.585025 env[1213]: time="2025-07-14T21:57:13.585005280Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 14 21:57:13.585126 env[1213]: time="2025-07-14T21:57:13.585108640Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 14 21:57:13.585522 env[1213]: time="2025-07-14T21:57:13.585498560Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 14 21:57:13.585608 env[1213]: time="2025-07-14T21:57:13.585590040Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 14 21:57:13.585644 env[1213]: time="2025-07-14T21:57:13.585610000Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 14 21:57:13.585781 env[1213]: time="2025-07-14T21:57:13.585766040Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 14 21:57:13.585830 env[1213]: time="2025-07-14T21:57:13.585781480Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 14 21:57:13.585830 env[1213]: time="2025-07-14T21:57:13.585815680Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 14 21:57:13.585897 env[1213]: time="2025-07-14T21:57:13.585835240Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 14 21:57:13.585897 env[1213]: time="2025-07-14T21:57:13.585853000Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 14 21:57:13.585897 env[1213]: time="2025-07-14T21:57:13.585875560Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 14 21:57:13.585897 env[1213]: time="2025-07-14T21:57:13.585886360Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 14 21:57:13.585897 env[1213]: time="2025-07-14T21:57:13.585897760Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 14 21:57:13.586006 env[1213]: time="2025-07-14T21:57:13.585916280Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 14 21:57:13.586069 env[1213]: time="2025-07-14T21:57:13.586047120Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 14 21:57:13.586069 env[1213]: time="2025-07-14T21:57:13.586067960Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 14 21:57:13.586122 env[1213]: time="2025-07-14T21:57:13.586080360Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 14 21:57:13.586122 env[1213]: time="2025-07-14T21:57:13.586093080Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 14 21:57:13.586122 env[1213]: time="2025-07-14T21:57:13.586107280Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 14 21:57:13.586122 env[1213]: time="2025-07-14T21:57:13.586118000Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 14 21:57:13.586201 env[1213]: time="2025-07-14T21:57:13.586141160Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 14 21:57:13.586201 env[1213]: time="2025-07-14T21:57:13.586173720Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 14 21:57:13.586425 env[1213]: time="2025-07-14T21:57:13.586371280Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 14 21:57:13.586425 env[1213]: time="2025-07-14T21:57:13.586429560Z" level=info msg="Connect containerd service" Jul 14 21:57:13.590035 env[1213]: time="2025-07-14T21:57:13.586463240Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 14 21:57:13.590035 env[1213]: time="2025-07-14T21:57:13.587331160Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 14 21:57:13.590035 env[1213]: time="2025-07-14T21:57:13.587875360Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 14 21:57:13.590035 env[1213]: time="2025-07-14T21:57:13.587921200Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 14 21:57:13.590035 env[1213]: time="2025-07-14T21:57:13.589350440Z" level=info msg="containerd successfully booted in 0.036783s" Jul 14 21:57:13.590035 env[1213]: time="2025-07-14T21:57:13.589932960Z" level=info msg="Start subscribing containerd event" Jul 14 21:57:13.590035 env[1213]: time="2025-07-14T21:57:13.589990920Z" level=info msg="Start recovering state" Jul 14 21:57:13.588065 systemd[1]: Started containerd.service. Jul 14 21:57:13.590217 env[1213]: time="2025-07-14T21:57:13.590055240Z" level=info msg="Start event monitor" Jul 14 21:57:13.590217 env[1213]: time="2025-07-14T21:57:13.590072280Z" level=info msg="Start snapshots syncer" Jul 14 21:57:13.590217 env[1213]: time="2025-07-14T21:57:13.590096480Z" level=info msg="Start cni network conf syncer for default" Jul 14 21:57:13.590217 env[1213]: time="2025-07-14T21:57:13.590103480Z" level=info msg="Start streaming server" Jul 14 21:57:13.606515 locksmithd[1245]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 14 21:57:13.835911 tar[1211]: linux-arm64/LICENSE Jul 14 21:57:13.836000 tar[1211]: linux-arm64/README.md Jul 14 21:57:13.840115 systemd[1]: Finished prepare-helm.service. Jul 14 21:57:14.632962 systemd-networkd[1047]: eth0: Gained IPv6LL Jul 14 21:57:14.635139 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 14 21:57:14.636388 systemd[1]: Reached target network-online.target. Jul 14 21:57:14.638627 systemd[1]: Starting kubelet.service... Jul 14 21:57:14.701816 sshd_keygen[1215]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 14 21:57:14.719210 systemd[1]: Finished sshd-keygen.service. Jul 14 21:57:14.721461 systemd[1]: Starting issuegen.service... Jul 14 21:57:14.726072 systemd[1]: issuegen.service: Deactivated successfully. Jul 14 21:57:14.726226 systemd[1]: Finished issuegen.service. Jul 14 21:57:14.728295 systemd[1]: Starting systemd-user-sessions.service... Jul 14 21:57:14.733845 systemd[1]: Finished systemd-user-sessions.service. Jul 14 21:57:14.736228 systemd[1]: Started getty@tty1.service. Jul 14 21:57:14.738371 systemd[1]: Started serial-getty@ttyAMA0.service. Jul 14 21:57:14.739371 systemd[1]: Reached target getty.target. Jul 14 21:57:15.235510 systemd[1]: Started kubelet.service. Jul 14 21:57:15.236678 systemd[1]: Reached target multi-user.target. Jul 14 21:57:15.238879 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 14 21:57:15.245485 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 14 21:57:15.245648 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 14 21:57:15.246898 systemd[1]: Startup finished in 568ms (kernel) + 44.601s (initrd) + 5.074s (userspace) = 50.244s. Jul 14 21:57:15.681724 kubelet[1272]: E0714 21:57:15.681625 1272 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 21:57:15.683298 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 21:57:15.683435 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 21:57:18.154743 systemd[1]: Created slice system-sshd.slice. Jul 14 21:57:18.156063 systemd[1]: Started sshd@0-10.0.0.76:22-10.0.0.1:35152.service. Jul 14 21:57:18.206356 sshd[1281]: Accepted publickey for core from 10.0.0.1 port 35152 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 21:57:18.210986 sshd[1281]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 21:57:18.219028 systemd[1]: Created slice user-500.slice. Jul 14 21:57:18.220128 systemd[1]: Starting user-runtime-dir@500.service... Jul 14 21:57:18.221856 systemd-logind[1206]: New session 1 of user core. Jul 14 21:57:18.229949 systemd[1]: Finished user-runtime-dir@500.service. Jul 14 21:57:18.231202 systemd[1]: Starting user@500.service... Jul 14 21:57:18.234024 (systemd)[1284]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 14 21:57:18.294157 systemd[1284]: Queued start job for default target default.target. Jul 14 21:57:18.294926 systemd[1284]: Reached target paths.target. Jul 14 21:57:18.294958 systemd[1284]: Reached target sockets.target. Jul 14 21:57:18.294970 systemd[1284]: Reached target timers.target. Jul 14 21:57:18.294980 systemd[1284]: Reached target basic.target. Jul 14 21:57:18.295021 systemd[1284]: Reached target default.target. Jul 14 21:57:18.295211 systemd[1]: Started user@500.service. Jul 14 21:57:18.295438 systemd[1284]: Startup finished in 55ms. Jul 14 21:57:18.296188 systemd[1]: Started session-1.scope. Jul 14 21:57:18.345656 systemd[1]: Started sshd@1-10.0.0.76:22-10.0.0.1:35168.service. Jul 14 21:57:18.387847 sshd[1293]: Accepted publickey for core from 10.0.0.1 port 35168 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 21:57:18.389182 sshd[1293]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 21:57:18.392950 systemd-logind[1206]: New session 2 of user core. Jul 14 21:57:18.394270 systemd[1]: Started session-2.scope. Jul 14 21:57:18.447606 sshd[1293]: pam_unix(sshd:session): session closed for user core Jul 14 21:57:18.450400 systemd[1]: Started sshd@2-10.0.0.76:22-10.0.0.1:35172.service. Jul 14 21:57:18.450866 systemd[1]: sshd@1-10.0.0.76:22-10.0.0.1:35168.service: Deactivated successfully. Jul 14 21:57:18.451560 systemd[1]: session-2.scope: Deactivated successfully. Jul 14 21:57:18.452080 systemd-logind[1206]: Session 2 logged out. Waiting for processes to exit. Jul 14 21:57:18.453041 systemd-logind[1206]: Removed session 2. Jul 14 21:57:18.488476 sshd[1298]: Accepted publickey for core from 10.0.0.1 port 35172 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 21:57:18.489644 sshd[1298]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 21:57:18.492703 systemd-logind[1206]: New session 3 of user core. Jul 14 21:57:18.493436 systemd[1]: Started session-3.scope. Jul 14 21:57:18.541705 sshd[1298]: pam_unix(sshd:session): session closed for user core Jul 14 21:57:18.545599 systemd[1]: sshd@2-10.0.0.76:22-10.0.0.1:35172.service: Deactivated successfully. Jul 14 21:57:18.546259 systemd[1]: session-3.scope: Deactivated successfully. Jul 14 21:57:18.546763 systemd-logind[1206]: Session 3 logged out. Waiting for processes to exit. Jul 14 21:57:18.547765 systemd[1]: Started sshd@3-10.0.0.76:22-10.0.0.1:35186.service. Jul 14 21:57:18.548467 systemd-logind[1206]: Removed session 3. Jul 14 21:57:18.585934 sshd[1305]: Accepted publickey for core from 10.0.0.1 port 35186 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 21:57:18.587488 sshd[1305]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 21:57:18.595357 systemd-logind[1206]: New session 4 of user core. Jul 14 21:57:18.598012 systemd[1]: Started session-4.scope. Jul 14 21:57:18.661840 sshd[1305]: pam_unix(sshd:session): session closed for user core Jul 14 21:57:18.664696 systemd[1]: sshd@3-10.0.0.76:22-10.0.0.1:35186.service: Deactivated successfully. Jul 14 21:57:18.665484 systemd[1]: session-4.scope: Deactivated successfully. Jul 14 21:57:18.666040 systemd-logind[1206]: Session 4 logged out. Waiting for processes to exit. Jul 14 21:57:18.667223 systemd[1]: Started sshd@4-10.0.0.76:22-10.0.0.1:35194.service. Jul 14 21:57:18.668058 systemd-logind[1206]: Removed session 4. Jul 14 21:57:18.706480 sshd[1311]: Accepted publickey for core from 10.0.0.1 port 35194 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 21:57:18.708026 sshd[1311]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 21:57:18.711371 systemd-logind[1206]: New session 5 of user core. Jul 14 21:57:18.712190 systemd[1]: Started session-5.scope. Jul 14 21:57:18.775867 sudo[1314]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 14 21:57:18.776343 sudo[1314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 14 21:57:18.788042 dbus-daemon[1191]: avc: received setenforce notice (enforcing=1) Jul 14 21:57:18.789759 sudo[1314]: pam_unix(sudo:session): session closed for user root Jul 14 21:57:18.791652 sshd[1311]: pam_unix(sshd:session): session closed for user core Jul 14 21:57:18.794333 systemd[1]: sshd@4-10.0.0.76:22-10.0.0.1:35194.service: Deactivated successfully. Jul 14 21:57:18.795011 systemd[1]: session-5.scope: Deactivated successfully. Jul 14 21:57:18.795580 systemd-logind[1206]: Session 5 logged out. Waiting for processes to exit. Jul 14 21:57:18.796608 systemd[1]: Started sshd@5-10.0.0.76:22-10.0.0.1:35206.service. Jul 14 21:57:18.797211 systemd-logind[1206]: Removed session 5. Jul 14 21:57:18.835797 sshd[1318]: Accepted publickey for core from 10.0.0.1 port 35206 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 21:57:18.837307 sshd[1318]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 21:57:18.842776 systemd-logind[1206]: New session 6 of user core. Jul 14 21:57:18.843203 systemd[1]: Started session-6.scope. Jul 14 21:57:18.894581 sudo[1322]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 14 21:57:18.894825 sudo[1322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 14 21:57:18.897336 sudo[1322]: pam_unix(sudo:session): session closed for user root Jul 14 21:57:18.901393 sudo[1321]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 14 21:57:18.901600 sudo[1321]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 14 21:57:18.909466 systemd[1]: Stopping audit-rules.service... Jul 14 21:57:18.909000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 14 21:57:18.910585 auditctl[1325]: No rules Jul 14 21:57:18.910835 systemd[1]: audit-rules.service: Deactivated successfully. Jul 14 21:57:18.911037 systemd[1]: Stopped audit-rules.service. Jul 14 21:57:18.911187 kernel: kauditd_printk_skb: 172 callbacks suppressed Jul 14 21:57:18.911212 kernel: audit: type=1305 audit(1752530238.909:204): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 14 21:57:18.912388 systemd[1]: Starting audit-rules.service... Jul 14 21:57:18.909000 audit[1325]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffdb979330 a2=420 a3=0 items=0 ppid=1 pid=1325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:18.916441 kernel: audit: type=1300 audit(1752530238.909:204): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffdb979330 a2=420 a3=0 items=0 ppid=1 pid=1325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:18.916486 kernel: audit: type=1327 audit(1752530238.909:204): proctitle=2F7362696E2F617564697463746C002D44 Jul 14 21:57:18.909000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 14 21:57:18.910000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:18.920025 kernel: audit: type=1131 audit(1752530238.910:205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:18.927871 augenrules[1342]: No rules Jul 14 21:57:18.928487 systemd[1]: Finished audit-rules.service. Jul 14 21:57:18.927000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:18.929546 sudo[1321]: pam_unix(sudo:session): session closed for user root Jul 14 21:57:18.930843 sshd[1318]: pam_unix(sshd:session): session closed for user core Jul 14 21:57:18.928000 audit[1321]: USER_END pid=1321 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 21:57:18.934129 systemd[1]: Started sshd@6-10.0.0.76:22-10.0.0.1:35208.service. Jul 14 21:57:18.934602 kernel: audit: type=1130 audit(1752530238.927:206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:18.934643 kernel: audit: type=1106 audit(1752530238.928:207): pid=1321 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 21:57:18.934660 kernel: audit: type=1104 audit(1752530238.928:208): pid=1321 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 21:57:18.928000 audit[1321]: CRED_DISP pid=1321 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 21:57:18.935107 systemd[1]: sshd@5-10.0.0.76:22-10.0.0.1:35206.service: Deactivated successfully. Jul 14 21:57:18.935820 systemd[1]: session-6.scope: Deactivated successfully. Jul 14 21:57:18.936908 systemd-logind[1206]: Session 6 logged out. Waiting for processes to exit. Jul 14 21:57:18.932000 audit[1318]: USER_END pid=1318 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:57:18.937727 systemd-logind[1206]: Removed session 6. Jul 14 21:57:18.940559 kernel: audit: type=1106 audit(1752530238.932:209): pid=1318 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:57:18.940593 kernel: audit: type=1104 audit(1752530238.932:210): pid=1318 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:57:18.932000 audit[1318]: CRED_DISP pid=1318 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:57:18.933000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.76:22-10.0.0.1:35208 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:18.945886 kernel: audit: type=1130 audit(1752530238.933:211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.76:22-10.0.0.1:35208 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:18.934000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.76:22-10.0.0.1:35206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:18.971000 audit[1347]: USER_ACCT pid=1347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:57:18.972388 sshd[1347]: Accepted publickey for core from 10.0.0.1 port 35208 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 21:57:18.972000 audit[1347]: CRED_ACQ pid=1347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:57:18.972000 audit[1347]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd6fbaed0 a2=3 a3=1 items=0 ppid=1 pid=1347 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:18.972000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 21:57:18.973899 sshd[1347]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 21:57:18.976982 systemd-logind[1206]: New session 7 of user core. Jul 14 21:57:18.977714 systemd[1]: Started session-7.scope. Jul 14 21:57:18.979000 audit[1347]: USER_START pid=1347 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:57:18.980000 audit[1350]: CRED_ACQ pid=1350 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:57:19.026000 audit[1351]: USER_ACCT pid=1351 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 21:57:19.028891 sudo[1351]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 14 21:57:19.027000 audit[1351]: CRED_REFR pid=1351 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 21:57:19.029120 sudo[1351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 14 21:57:19.028000 audit[1351]: USER_START pid=1351 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 21:57:19.077814 systemd[1]: Starting docker.service... Jul 14 21:57:19.156711 env[1362]: time="2025-07-14T21:57:19.156659252Z" level=info msg="Starting up" Jul 14 21:57:19.158337 env[1362]: time="2025-07-14T21:57:19.158307757Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 14 21:57:19.158337 env[1362]: time="2025-07-14T21:57:19.158330063Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 14 21:57:19.158436 env[1362]: time="2025-07-14T21:57:19.158358406Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 14 21:57:19.158436 env[1362]: time="2025-07-14T21:57:19.158368638Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 14 21:57:19.160339 env[1362]: time="2025-07-14T21:57:19.160313317Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 14 21:57:19.160420 env[1362]: time="2025-07-14T21:57:19.160405953Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 14 21:57:19.160479 env[1362]: time="2025-07-14T21:57:19.160463188Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 14 21:57:19.160531 env[1362]: time="2025-07-14T21:57:19.160515210Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 14 21:57:19.164857 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport4188766969-merged.mount: Deactivated successfully. Jul 14 21:57:19.331884 env[1362]: time="2025-07-14T21:57:19.331833424Z" level=info msg="Loading containers: start." Jul 14 21:57:19.378000 audit[1395]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1395 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:57:19.378000 audit[1395]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffd9af8a00 a2=0 a3=1 items=0 ppid=1362 pid=1395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:19.378000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 14 21:57:19.380000 audit[1397]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1397 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:57:19.380000 audit[1397]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffe2e00610 a2=0 a3=1 items=0 ppid=1362 pid=1397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:19.380000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 14 21:57:19.382000 audit[1399]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1399 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:57:19.382000 audit[1399]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffcff72f70 a2=0 a3=1 items=0 ppid=1362 pid=1399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:19.382000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 14 21:57:19.384000 audit[1401]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1401 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:57:19.384000 audit[1401]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffffcbd4a00 a2=0 a3=1 items=0 ppid=1362 pid=1401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:19.384000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 14 21:57:19.387000 audit[1403]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1403 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:57:19.387000 audit[1403]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffccb5b040 a2=0 a3=1 items=0 ppid=1362 pid=1403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:19.387000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 14 21:57:19.409000 audit[1408]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1408 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:57:19.409000 audit[1408]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffede09400 a2=0 a3=1 items=0 ppid=1362 pid=1408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:19.409000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 14 21:57:19.416000 audit[1410]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1410 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:57:19.416000 audit[1410]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd1f5efa0 a2=0 a3=1 items=0 ppid=1362 pid=1410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:19.416000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 14 21:57:19.418000 audit[1412]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1412 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:57:19.418000 audit[1412]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffdebbdbe0 a2=0 a3=1 items=0 ppid=1362 pid=1412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:19.418000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 14 21:57:19.419000 audit[1414]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1414 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:57:19.419000 audit[1414]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffcbfa80b0 a2=0 a3=1 items=0 ppid=1362 pid=1414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:19.419000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 14 21:57:19.426000 audit[1418]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1418 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:57:19.426000 audit[1418]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffff8bbc740 a2=0 a3=1 items=0 ppid=1362 pid=1418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:19.426000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 14 21:57:19.435000 audit[1419]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1419 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:57:19.435000 audit[1419]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd4ff4490 a2=0 a3=1 items=0 ppid=1362 pid=1419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:19.435000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 14 21:57:19.445895 kernel: Initializing XFRM netlink socket Jul 14 21:57:19.467647 env[1362]: time="2025-07-14T21:57:19.467603047Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 14 21:57:19.481000 audit[1427]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1427 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:57:19.481000 audit[1427]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffe9ab3940 a2=0 a3=1 items=0 ppid=1362 pid=1427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:19.481000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 14 21:57:19.499000 audit[1430]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1430 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:57:19.499000 audit[1430]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffd7d9ce10 a2=0 a3=1 items=0 ppid=1362 pid=1430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:19.499000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 14 21:57:19.502000 audit[1433]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1433 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:57:19.502000 audit[1433]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffff55f91a0 a2=0 a3=1 items=0 ppid=1362 pid=1433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:19.502000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 14 21:57:19.504000 audit[1435]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1435 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:57:19.504000 audit[1435]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc445bf50 a2=0 a3=1 items=0 ppid=1362 pid=1435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:19.504000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 14 21:57:19.505000 audit[1437]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1437 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:57:19.505000 audit[1437]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=fffff05efbe0 a2=0 a3=1 items=0 ppid=1362 pid=1437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:19.505000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 14 21:57:19.507000 audit[1439]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1439 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:57:19.507000 audit[1439]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=fffffbe67c70 a2=0 a3=1 items=0 ppid=1362 pid=1439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:19.507000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 14 21:57:19.509000 audit[1441]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1441 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:57:19.509000 audit[1441]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffcc87d2d0 a2=0 a3=1 items=0 ppid=1362 pid=1441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:19.509000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 14 21:57:19.517000 audit[1444]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1444 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:57:19.517000 audit[1444]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffdccc0790 a2=0 a3=1 items=0 ppid=1362 pid=1444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:19.517000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 14 21:57:19.518000 audit[1446]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1446 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:57:19.518000 audit[1446]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffdb8d3260 a2=0 a3=1 items=0 ppid=1362 pid=1446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:19.518000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 14 21:57:19.519000 audit[1448]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1448 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:57:19.519000 audit[1448]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffe2eb66e0 a2=0 a3=1 items=0 ppid=1362 pid=1448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:19.519000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 14 21:57:19.521000 audit[1450]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1450 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:57:19.521000 audit[1450]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffffd231cd0 a2=0 a3=1 items=0 ppid=1362 pid=1450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:19.521000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 14 21:57:19.523806 systemd-networkd[1047]: docker0: Link UP Jul 14 21:57:19.537000 audit[1454]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1454 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:57:19.537000 audit[1454]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff8d76f90 a2=0 a3=1 items=0 ppid=1362 pid=1454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:19.537000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 14 21:57:19.547000 audit[1455]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1455 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:57:19.547000 audit[1455]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffdd449df0 a2=0 a3=1 items=0 ppid=1362 pid=1455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:57:19.547000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 14 21:57:19.549078 env[1362]: time="2025-07-14T21:57:19.549036674Z" level=info msg="Loading containers: done." Jul 14 21:57:19.566697 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3297372652-merged.mount: Deactivated successfully. Jul 14 21:57:19.577230 env[1362]: time="2025-07-14T21:57:19.577192418Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 14 21:57:19.577562 env[1362]: time="2025-07-14T21:57:19.577542340Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 14 21:57:19.577749 env[1362]: time="2025-07-14T21:57:19.577732629Z" level=info msg="Daemon has completed initialization" Jul 14 21:57:19.594426 systemd[1]: Started docker.service. Jul 14 21:57:19.593000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:19.604810 env[1362]: time="2025-07-14T21:57:19.604760282Z" level=info msg="API listen on /run/docker.sock" Jul 14 21:57:25.728216 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 14 21:57:25.727000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:25.728403 systemd[1]: Stopped kubelet.service. Jul 14 21:57:25.729095 kernel: kauditd_printk_skb: 84 callbacks suppressed Jul 14 21:57:25.729184 kernel: audit: type=1130 audit(1752530245.727:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:25.730355 systemd[1]: Starting kubelet.service... Jul 14 21:57:25.727000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:25.733868 kernel: audit: type=1131 audit(1752530245.727:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:25.826000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:25.827420 systemd[1]: Started kubelet.service. Jul 14 21:57:25.830891 kernel: audit: type=1130 audit(1752530245.826:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:25.871138 kubelet[1494]: E0714 21:57:25.871084 1494 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 21:57:25.873394 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 21:57:25.873521 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 21:57:25.872000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 21:57:25.876880 kernel: audit: type=1131 audit(1752530245.872:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 21:57:29.992614 env[1213]: time="2025-07-14T21:57:29.992566054Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.8\"" Jul 14 21:57:35.975789 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 14 21:57:35.975000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:35.975986 systemd[1]: Stopped kubelet.service. Jul 14 21:57:35.977548 systemd[1]: Starting kubelet.service... Jul 14 21:57:35.975000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:35.981330 kernel: audit: type=1130 audit(1752530255.975:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:35.981401 kernel: audit: type=1131 audit(1752530255.975:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:36.070000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:36.071273 systemd[1]: Started kubelet.service. Jul 14 21:57:36.074871 kernel: audit: type=1130 audit(1752530256.070:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:36.109418 kubelet[1508]: E0714 21:57:36.109375 1508 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 21:57:36.110000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 21:57:36.111226 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 21:57:36.111345 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 21:57:36.114892 kernel: audit: type=1131 audit(1752530256.110:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 21:57:41.232199 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount732151654.mount: Deactivated successfully. Jul 14 21:57:42.326053 env[1213]: time="2025-07-14T21:57:42.325992909Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.31.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:57:42.328127 env[1213]: time="2025-07-14T21:57:42.328089929Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ef8fb1ea7c9599dbedea6f9d5589975ebc5bf4ec72f6be6acaaec59a723a09b3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:57:42.329993 env[1213]: time="2025-07-14T21:57:42.329966753Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.31.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:57:42.331600 env[1213]: time="2025-07-14T21:57:42.331568990Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:30090db6a7d53799163ce82dae9e8ddb645fd47db93f2ec9da0cc787fd825625,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:57:42.333251 env[1213]: time="2025-07-14T21:57:42.333160917Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.8\" returns image reference \"sha256:ef8fb1ea7c9599dbedea6f9d5589975ebc5bf4ec72f6be6acaaec59a723a09b3\"" Jul 14 21:57:42.336478 env[1213]: time="2025-07-14T21:57:42.336451513Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.8\"" Jul 14 21:57:43.713680 env[1213]: time="2025-07-14T21:57:43.713634932Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.31.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:57:43.714970 env[1213]: time="2025-07-14T21:57:43.714942873Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ea6e6085feca75547d0422ab0536fe0d18c9ff5831de7a9d6a707c968027bb6a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:57:43.716694 env[1213]: time="2025-07-14T21:57:43.716654847Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.31.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:57:43.718938 env[1213]: time="2025-07-14T21:57:43.718903866Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:29eaddc64792a689df48506e78bbc641d063ac8bb92d2e66ae2ad05977420747,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:57:43.719653 env[1213]: time="2025-07-14T21:57:43.719622565Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.8\" returns image reference \"sha256:ea6e6085feca75547d0422ab0536fe0d18c9ff5831de7a9d6a707c968027bb6a\"" Jul 14 21:57:43.720165 env[1213]: time="2025-07-14T21:57:43.720141465Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.8\"" Jul 14 21:57:44.960838 env[1213]: time="2025-07-14T21:57:44.960786366Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.31.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:57:44.964942 env[1213]: time="2025-07-14T21:57:44.964889180Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1d2db6ef0dd2f3e08bdfcd46afde7b755b05192841f563d8df54b807daaa7d8d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:57:44.966414 env[1213]: time="2025-07-14T21:57:44.966362936Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.31.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:57:44.968120 env[1213]: time="2025-07-14T21:57:44.968081519Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:22994a2632e81059720480b9f6bdeb133b08d58492d0b36dfd6e9768b159b22a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:57:44.969096 env[1213]: time="2025-07-14T21:57:44.969064503Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.8\" returns image reference \"sha256:1d2db6ef0dd2f3e08bdfcd46afde7b755b05192841f563d8df54b807daaa7d8d\"" Jul 14 21:57:44.969549 env[1213]: time="2025-07-14T21:57:44.969511826Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.8\"" Jul 14 21:57:45.983659 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3567139564.mount: Deactivated successfully. Jul 14 21:57:46.225714 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Jul 14 21:57:46.225000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:46.225910 systemd[1]: Stopped kubelet.service. Jul 14 21:57:46.227307 systemd[1]: Starting kubelet.service... Jul 14 21:57:46.225000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:46.230580 kernel: audit: type=1130 audit(1752530266.225:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:46.230654 kernel: audit: type=1131 audit(1752530266.225:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:46.372469 systemd[1]: Started kubelet.service. Jul 14 21:57:46.371000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:46.375890 kernel: audit: type=1130 audit(1752530266.371:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:46.411299 kubelet[1522]: E0714 21:57:46.411247 1522 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 21:57:46.413193 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 21:57:46.413333 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 21:57:46.412000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 21:57:46.416886 kernel: audit: type=1131 audit(1752530266.412:257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 21:57:46.569076 env[1213]: time="2025-07-14T21:57:46.568997248Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.31.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:57:46.570260 env[1213]: time="2025-07-14T21:57:46.570207848Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c5361ece77e80334cd5fb082c0b678cb3244f5834ecacea1719ae6b38b465581,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:57:46.571513 env[1213]: time="2025-07-14T21:57:46.571470216Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.31.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:57:46.572947 env[1213]: time="2025-07-14T21:57:46.572891725Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:dd0c9a37670f209947b1ed880f06a2e93e1d41da78c037f52f94b13858769838,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:57:46.573396 env[1213]: time="2025-07-14T21:57:46.573281497Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.8\" returns image reference \"sha256:c5361ece77e80334cd5fb082c0b678cb3244f5834ecacea1719ae6b38b465581\"" Jul 14 21:57:46.573775 env[1213]: time="2025-07-14T21:57:46.573752440Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Jul 14 21:57:47.078765 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3631284862.mount: Deactivated successfully. Jul 14 21:57:47.925510 env[1213]: time="2025-07-14T21:57:47.925416789Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:57:47.926782 env[1213]: time="2025-07-14T21:57:47.926739715Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:57:47.928876 env[1213]: time="2025-07-14T21:57:47.928837059Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:57:47.930929 env[1213]: time="2025-07-14T21:57:47.930895597Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:57:47.931753 env[1213]: time="2025-07-14T21:57:47.931720180Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4\"" Jul 14 21:57:47.933147 env[1213]: time="2025-07-14T21:57:47.933119316Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 14 21:57:48.336701 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2418956856.mount: Deactivated successfully. Jul 14 21:57:48.342058 env[1213]: time="2025-07-14T21:57:48.341974441Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:57:48.343442 env[1213]: time="2025-07-14T21:57:48.343402250Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:57:48.344801 env[1213]: time="2025-07-14T21:57:48.344771053Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:57:48.346052 env[1213]: time="2025-07-14T21:57:48.346022641Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:57:48.346492 env[1213]: time="2025-07-14T21:57:48.346458013Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Jul 14 21:57:48.346894 env[1213]: time="2025-07-14T21:57:48.346856500Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\"" Jul 14 21:57:48.829425 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1962562959.mount: Deactivated successfully. Jul 14 21:57:51.075027 env[1213]: time="2025-07-14T21:57:51.074976675Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:57:51.076580 env[1213]: time="2025-07-14T21:57:51.076547793Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:27e3830e1402783674d8b594038967deea9d51f0d91b34c93c8f39d2f68af7da,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:57:51.078643 env[1213]: time="2025-07-14T21:57:51.078612080Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:57:51.080443 env[1213]: time="2025-07-14T21:57:51.080417901Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:a6dc63e6e8cfa0307d7851762fa6b629afb18f28d8aa3fab5a6e91b4af60026a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:57:51.081381 env[1213]: time="2025-07-14T21:57:51.081353515Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\" returns image reference \"sha256:27e3830e1402783674d8b594038967deea9d51f0d91b34c93c8f39d2f68af7da\"" Jul 14 21:57:56.475763 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Jul 14 21:57:56.475000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:56.475953 systemd[1]: Stopped kubelet.service. Jul 14 21:57:56.477329 systemd[1]: Starting kubelet.service... Jul 14 21:57:56.475000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:56.481040 kernel: audit: type=1130 audit(1752530276.475:258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:56.481118 kernel: audit: type=1131 audit(1752530276.475:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:56.566000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:56.567258 systemd[1]: Started kubelet.service. Jul 14 21:57:56.571238 kernel: audit: type=1130 audit(1752530276.566:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:57:56.601567 kubelet[1539]: E0714 21:57:56.601517 1539 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 21:57:56.603596 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 21:57:56.603716 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 21:57:56.603000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 21:57:56.606912 kernel: audit: type=1131 audit(1752530276.603:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 21:57:59.042617 update_engine[1208]: I0714 21:57:59.042162 1208 update_attempter.cc:509] Updating boot flags... Jul 14 21:58:05.811634 systemd[1]: Stopped kubelet.service. Jul 14 21:58:05.810000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:58:05.813711 systemd[1]: Starting kubelet.service... Jul 14 21:58:05.810000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:58:05.816651 kernel: audit: type=1130 audit(1752530285.810:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:58:05.816734 kernel: audit: type=1131 audit(1752530285.810:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:58:05.842218 systemd[1]: Reloading. Jul 14 21:58:05.899705 /usr/lib/systemd/system-generators/torcx-generator[1602]: time="2025-07-14T21:58:05Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.101 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.101 /var/lib/torcx/store]" Jul 14 21:58:05.899736 /usr/lib/systemd/system-generators/torcx-generator[1602]: time="2025-07-14T21:58:05Z" level=info msg="torcx already run" Jul 14 21:58:06.028959 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 14 21:58:06.028978 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 14 21:58:06.044490 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 14 21:58:06.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.098765 kernel: audit: type=1400 audit(1752530286.092:264): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.098843 kernel: audit: type=1400 audit(1752530286.092:265): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.098881 kernel: audit: type=1400 audit(1752530286.092:266): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.110683 kernel: audit: type=1400 audit(1752530286.092:267): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.110720 kernel: audit: type=1400 audit(1752530286.092:268): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.115849 kernel: audit: type=1400 audit(1752530286.092:269): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.115893 kernel: audit: type=1400 audit(1752530286.092:270): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.094000 audit: BPF prog-id=40 op=LOAD Jul 14 21:58:06.094000 audit: BPF prog-id=34 op=UNLOAD Jul 14 21:58:06.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.097000 audit: BPF prog-id=41 op=LOAD Jul 14 21:58:06.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.104000 audit: BPF prog-id=42 op=LOAD Jul 14 21:58:06.104000 audit: BPF prog-id=24 op=UNLOAD Jul 14 21:58:06.104000 audit: BPF prog-id=25 op=UNLOAD Jul 14 21:58:06.118883 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 14 21:58:06.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.109000 audit: BPF prog-id=43 op=LOAD Jul 14 21:58:06.109000 audit: BPF prog-id=26 op=UNLOAD Jul 14 21:58:06.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.112000 audit: BPF prog-id=44 op=LOAD Jul 14 21:58:06.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.114000 audit: BPF prog-id=45 op=LOAD Jul 14 21:58:06.114000 audit: BPF prog-id=27 op=UNLOAD Jul 14 21:58:06.114000 audit: BPF prog-id=28 op=UNLOAD Jul 14 21:58:06.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.118000 audit: BPF prog-id=46 op=LOAD Jul 14 21:58:06.118000 audit: BPF prog-id=38 op=UNLOAD Jul 14 21:58:06.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit: BPF prog-id=47 op=LOAD Jul 14 21:58:06.119000 audit: BPF prog-id=29 op=UNLOAD Jul 14 21:58:06.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit: BPF prog-id=48 op=LOAD Jul 14 21:58:06.119000 audit: BPF prog-id=30 op=UNLOAD Jul 14 21:58:06.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit: BPF prog-id=49 op=LOAD Jul 14 21:58:06.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.119000 audit: BPF prog-id=50 op=LOAD Jul 14 21:58:06.119000 audit: BPF prog-id=31 op=UNLOAD Jul 14 21:58:06.119000 audit: BPF prog-id=32 op=UNLOAD Jul 14 21:58:06.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.120000 audit: BPF prog-id=51 op=LOAD Jul 14 21:58:06.120000 audit: BPF prog-id=35 op=UNLOAD Jul 14 21:58:06.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.120000 audit: BPF prog-id=52 op=LOAD Jul 14 21:58:06.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.120000 audit: BPF prog-id=53 op=LOAD Jul 14 21:58:06.120000 audit: BPF prog-id=36 op=UNLOAD Jul 14 21:58:06.120000 audit: BPF prog-id=37 op=UNLOAD Jul 14 21:58:06.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:06.122000 audit: BPF prog-id=54 op=LOAD Jul 14 21:58:06.122000 audit: BPF prog-id=33 op=UNLOAD Jul 14 21:58:06.132000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:58:06.133669 systemd[1]: Started kubelet.service. Jul 14 21:58:06.135056 systemd[1]: Stopping kubelet.service... Jul 14 21:58:06.135313 systemd[1]: kubelet.service: Deactivated successfully. Jul 14 21:58:06.135492 systemd[1]: Stopped kubelet.service. Jul 14 21:58:06.134000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:58:06.137363 systemd[1]: Starting kubelet.service... Jul 14 21:58:06.231783 systemd[1]: Started kubelet.service. Jul 14 21:58:06.231000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:58:06.266818 kubelet[1646]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 14 21:58:06.266818 kubelet[1646]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 14 21:58:06.266818 kubelet[1646]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 14 21:58:06.267178 kubelet[1646]: I0714 21:58:06.266852 1646 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 14 21:58:07.028736 kubelet[1646]: I0714 21:58:07.028687 1646 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Jul 14 21:58:07.028736 kubelet[1646]: I0714 21:58:07.028721 1646 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 14 21:58:07.029001 kubelet[1646]: I0714 21:58:07.028976 1646 server.go:934] "Client rotation is on, will bootstrap in background" Jul 14 21:58:07.100213 kubelet[1646]: E0714 21:58:07.100175 1646 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.76:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.76:6443: connect: connection refused" logger="UnhandledError" Jul 14 21:58:07.101136 kubelet[1646]: I0714 21:58:07.101121 1646 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 14 21:58:07.108659 kubelet[1646]: E0714 21:58:07.108615 1646 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 14 21:58:07.108659 kubelet[1646]: I0714 21:58:07.108646 1646 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 14 21:58:07.112243 kubelet[1646]: I0714 21:58:07.112212 1646 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 14 21:58:07.112614 kubelet[1646]: I0714 21:58:07.112590 1646 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Jul 14 21:58:07.112738 kubelet[1646]: I0714 21:58:07.112707 1646 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 14 21:58:07.112910 kubelet[1646]: I0714 21:58:07.112734 1646 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 14 21:58:07.112988 kubelet[1646]: I0714 21:58:07.112926 1646 topology_manager.go:138] "Creating topology manager with none policy" Jul 14 21:58:07.112988 kubelet[1646]: I0714 21:58:07.112937 1646 container_manager_linux.go:300] "Creating device plugin manager" Jul 14 21:58:07.113190 kubelet[1646]: I0714 21:58:07.113165 1646 state_mem.go:36] "Initialized new in-memory state store" Jul 14 21:58:07.124050 kubelet[1646]: I0714 21:58:07.124019 1646 kubelet.go:408] "Attempting to sync node with API server" Jul 14 21:58:07.124156 kubelet[1646]: I0714 21:58:07.124145 1646 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 14 21:58:07.124250 kubelet[1646]: I0714 21:58:07.124239 1646 kubelet.go:314] "Adding apiserver pod source" Jul 14 21:58:07.124471 kubelet[1646]: I0714 21:58:07.124459 1646 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 14 21:58:07.125445 kubelet[1646]: W0714 21:58:07.125390 1646 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.76:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.76:6443: connect: connection refused Jul 14 21:58:07.125526 kubelet[1646]: E0714 21:58:07.125455 1646 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.76:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.76:6443: connect: connection refused" logger="UnhandledError" Jul 14 21:58:07.125526 kubelet[1646]: W0714 21:58:07.125509 1646 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.76:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.76:6443: connect: connection refused Jul 14 21:58:07.125615 kubelet[1646]: E0714 21:58:07.125534 1646 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.76:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.76:6443: connect: connection refused" logger="UnhandledError" Jul 14 21:58:07.129083 kubelet[1646]: I0714 21:58:07.129063 1646 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 14 21:58:07.129848 kubelet[1646]: I0714 21:58:07.129815 1646 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 14 21:58:07.130046 kubelet[1646]: W0714 21:58:07.130025 1646 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 14 21:58:07.130998 kubelet[1646]: I0714 21:58:07.130971 1646 server.go:1274] "Started kubelet" Jul 14 21:58:07.131275 kubelet[1646]: I0714 21:58:07.131229 1646 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Jul 14 21:58:07.132453 kubelet[1646]: I0714 21:58:07.132191 1646 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 14 21:58:07.132453 kubelet[1646]: I0714 21:58:07.132450 1646 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 14 21:58:07.132985 kubelet[1646]: I0714 21:58:07.132962 1646 server.go:449] "Adding debug handlers to kubelet server" Jul 14 21:58:07.133000 audit[1646]: AVC avc: denied { mac_admin } for pid=1646 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:07.133000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 21:58:07.133000 audit[1646]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000c24480 a1=4000c36408 a2=4000c24450 a3=25 items=0 ppid=1 pid=1646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:07.133000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 21:58:07.133000 audit[1646]: AVC avc: denied { mac_admin } for pid=1646 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:07.133000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 21:58:07.133000 audit[1646]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40009177a0 a1=4000c36420 a2=4000c24510 a3=25 items=0 ppid=1 pid=1646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:07.133000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 21:58:07.135074 kubelet[1646]: I0714 21:58:07.134732 1646 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 14 21:58:07.135074 kubelet[1646]: I0714 21:58:07.134773 1646 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 14 21:58:07.135074 kubelet[1646]: I0714 21:58:07.134828 1646 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 14 21:58:07.135238 kubelet[1646]: E0714 21:58:07.135215 1646 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 14 21:58:07.135389 kubelet[1646]: I0714 21:58:07.135357 1646 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 14 21:58:07.135585 kubelet[1646]: E0714 21:58:07.134177 1646 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.76:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.76:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.18523d02c68da7bd default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-14 21:58:07.130945469 +0000 UTC m=+0.895402743,LastTimestamp:2025-07-14 21:58:07.130945469 +0000 UTC m=+0.895402743,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 14 21:58:07.136285 kubelet[1646]: E0714 21:58:07.136250 1646 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 21:58:07.136285 kubelet[1646]: I0714 21:58:07.136287 1646 volume_manager.go:289] "Starting Kubelet Volume Manager" Jul 14 21:58:07.136470 kubelet[1646]: I0714 21:58:07.136442 1646 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Jul 14 21:58:07.136525 kubelet[1646]: I0714 21:58:07.136515 1646 reconciler.go:26] "Reconciler: start to sync state" Jul 14 21:58:07.137012 kubelet[1646]: W0714 21:58:07.136972 1646 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.76:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.76:6443: connect: connection refused Jul 14 21:58:07.137071 kubelet[1646]: E0714 21:58:07.137022 1646 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.76:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.76:6443: connect: connection refused" logger="UnhandledError" Jul 14 21:58:07.137254 kubelet[1646]: I0714 21:58:07.137226 1646 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 14 21:58:07.137845 kubelet[1646]: E0714 21:58:07.137815 1646 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.76:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.76:6443: connect: connection refused" interval="200ms" Jul 14 21:58:07.137000 audit[1659]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1659 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:07.137000 audit[1659]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe209e0e0 a2=0 a3=1 items=0 ppid=1646 pid=1659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:07.137000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 14 21:58:07.138517 kubelet[1646]: I0714 21:58:07.138484 1646 factory.go:221] Registration of the containerd container factory successfully Jul 14 21:58:07.138517 kubelet[1646]: I0714 21:58:07.138508 1646 factory.go:221] Registration of the systemd container factory successfully Jul 14 21:58:07.138000 audit[1661]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1661 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:07.138000 audit[1661]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc738c090 a2=0 a3=1 items=0 ppid=1646 pid=1661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:07.138000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 14 21:58:07.140000 audit[1663]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1663 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:07.140000 audit[1663]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe45a2830 a2=0 a3=1 items=0 ppid=1646 pid=1663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:07.140000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 14 21:58:07.143000 audit[1665]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1665 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:07.143000 audit[1665]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd8a1d280 a2=0 a3=1 items=0 ppid=1646 pid=1665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:07.143000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 14 21:58:07.151456 kubelet[1646]: I0714 21:58:07.151435 1646 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 14 21:58:07.151456 kubelet[1646]: I0714 21:58:07.151454 1646 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 14 21:58:07.151534 kubelet[1646]: I0714 21:58:07.151471 1646 state_mem.go:36] "Initialized new in-memory state store" Jul 14 21:58:07.152000 audit[1671]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1671 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:07.152000 audit[1671]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=fffff0b7ddb0 a2=0 a3=1 items=0 ppid=1646 pid=1671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:07.152000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 14 21:58:07.153800 kubelet[1646]: I0714 21:58:07.153260 1646 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 14 21:58:07.153000 audit[1672]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1672 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 21:58:07.153000 audit[1672]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffed1af590 a2=0 a3=1 items=0 ppid=1646 pid=1672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:07.153000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 14 21:58:07.154212 kubelet[1646]: I0714 21:58:07.154188 1646 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 14 21:58:07.154256 kubelet[1646]: I0714 21:58:07.154220 1646 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 14 21:58:07.154256 kubelet[1646]: I0714 21:58:07.154245 1646 kubelet.go:2321] "Starting kubelet main sync loop" Jul 14 21:58:07.154302 kubelet[1646]: E0714 21:58:07.154285 1646 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 14 21:58:07.153000 audit[1673]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1673 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:07.153000 audit[1673]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe0ffeaf0 a2=0 a3=1 items=0 ppid=1646 pid=1673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:07.153000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 14 21:58:07.154000 audit[1675]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1675 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 21:58:07.154000 audit[1675]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc64844e0 a2=0 a3=1 items=0 ppid=1646 pid=1675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:07.154000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 14 21:58:07.154000 audit[1676]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1676 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:07.154000 audit[1676]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff8eeb310 a2=0 a3=1 items=0 ppid=1646 pid=1676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:07.154000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 14 21:58:07.155000 audit[1677]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=1677 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 21:58:07.155000 audit[1677]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffc7074d90 a2=0 a3=1 items=0 ppid=1646 pid=1677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:07.155000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 14 21:58:07.155000 audit[1678]: NETFILTER_CFG table=filter:36 family=10 entries=2 op=nft_register_chain pid=1678 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 21:58:07.155000 audit[1678]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffffc5b0e30 a2=0 a3=1 items=0 ppid=1646 pid=1678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:07.155000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 14 21:58:07.156000 audit[1679]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=1679 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:07.156000 audit[1679]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd66d8820 a2=0 a3=1 items=0 ppid=1646 pid=1679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:07.156000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 14 21:58:07.159256 kubelet[1646]: I0714 21:58:07.159228 1646 policy_none.go:49] "None policy: Start" Jul 14 21:58:07.159587 kubelet[1646]: W0714 21:58:07.159545 1646 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.76:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.76:6443: connect: connection refused Jul 14 21:58:07.159638 kubelet[1646]: E0714 21:58:07.159601 1646 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.76:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.76:6443: connect: connection refused" logger="UnhandledError" Jul 14 21:58:07.159774 kubelet[1646]: I0714 21:58:07.159760 1646 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 14 21:58:07.159806 kubelet[1646]: I0714 21:58:07.159785 1646 state_mem.go:35] "Initializing new in-memory state store" Jul 14 21:58:07.165289 systemd[1]: Created slice kubepods.slice. Jul 14 21:58:07.170027 systemd[1]: Created slice kubepods-burstable.slice. Jul 14 21:58:07.172587 systemd[1]: Created slice kubepods-besteffort.slice. Jul 14 21:58:07.184712 kubelet[1646]: I0714 21:58:07.184687 1646 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 14 21:58:07.183000 audit[1646]: AVC avc: denied { mac_admin } for pid=1646 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:07.183000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 21:58:07.183000 audit[1646]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000870660 a1=4000997b18 a2=4000870630 a3=25 items=0 ppid=1 pid=1646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:07.183000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 21:58:07.185142 kubelet[1646]: I0714 21:58:07.185117 1646 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 14 21:58:07.185329 kubelet[1646]: I0714 21:58:07.185313 1646 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 14 21:58:07.185441 kubelet[1646]: I0714 21:58:07.185395 1646 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 14 21:58:07.186184 kubelet[1646]: I0714 21:58:07.186145 1646 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 14 21:58:07.186520 kubelet[1646]: E0714 21:58:07.186497 1646 eviction_manager.go:285] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 14 21:58:07.265712 systemd[1]: Created slice kubepods-burstable-pod359a826a230e11e3cf0df43f6b155a54.slice. Jul 14 21:58:07.281412 systemd[1]: Created slice kubepods-burstable-pod0613557c150e4f35d1f3f822b5f32ff1.slice. Jul 14 21:58:07.286993 kubelet[1646]: I0714 21:58:07.286926 1646 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 14 21:58:07.287578 kubelet[1646]: E0714 21:58:07.287538 1646 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.76:6443/api/v1/nodes\": dial tcp 10.0.0.76:6443: connect: connection refused" node="localhost" Jul 14 21:58:07.287027 systemd[1]: Created slice kubepods-burstable-podd4a6b755cb4739fbca401212ebb82b6d.slice. Jul 14 21:58:07.338592 kubelet[1646]: E0714 21:58:07.338549 1646 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.76:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.76:6443: connect: connection refused" interval="400ms" Jul 14 21:58:07.438264 kubelet[1646]: I0714 21:58:07.438139 1646 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d4a6b755cb4739fbca401212ebb82b6d-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d4a6b755cb4739fbca401212ebb82b6d\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 21:58:07.438264 kubelet[1646]: I0714 21:58:07.438235 1646 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d4a6b755cb4739fbca401212ebb82b6d-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d4a6b755cb4739fbca401212ebb82b6d\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 21:58:07.438687 kubelet[1646]: I0714 21:58:07.438478 1646 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d4a6b755cb4739fbca401212ebb82b6d-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"d4a6b755cb4739fbca401212ebb82b6d\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 21:58:07.438687 kubelet[1646]: I0714 21:58:07.438505 1646 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/0613557c150e4f35d1f3f822b5f32ff1-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"0613557c150e4f35d1f3f822b5f32ff1\") " pod="kube-system/kube-scheduler-localhost" Jul 14 21:58:07.438687 kubelet[1646]: I0714 21:58:07.438525 1646 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/359a826a230e11e3cf0df43f6b155a54-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"359a826a230e11e3cf0df43f6b155a54\") " pod="kube-system/kube-apiserver-localhost" Jul 14 21:58:07.438687 kubelet[1646]: I0714 21:58:07.438541 1646 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/359a826a230e11e3cf0df43f6b155a54-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"359a826a230e11e3cf0df43f6b155a54\") " pod="kube-system/kube-apiserver-localhost" Jul 14 21:58:07.438687 kubelet[1646]: I0714 21:58:07.438560 1646 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/359a826a230e11e3cf0df43f6b155a54-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"359a826a230e11e3cf0df43f6b155a54\") " pod="kube-system/kube-apiserver-localhost" Jul 14 21:58:07.438830 kubelet[1646]: I0714 21:58:07.438581 1646 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d4a6b755cb4739fbca401212ebb82b6d-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"d4a6b755cb4739fbca401212ebb82b6d\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 21:58:07.438830 kubelet[1646]: I0714 21:58:07.438601 1646 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d4a6b755cb4739fbca401212ebb82b6d-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"d4a6b755cb4739fbca401212ebb82b6d\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 21:58:07.489247 kubelet[1646]: I0714 21:58:07.489222 1646 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 14 21:58:07.489749 kubelet[1646]: E0714 21:58:07.489694 1646 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.76:6443/api/v1/nodes\": dial tcp 10.0.0.76:6443: connect: connection refused" node="localhost" Jul 14 21:58:07.577539 kubelet[1646]: E0714 21:58:07.577446 1646 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:07.578380 env[1213]: time="2025-07-14T21:58:07.578274147Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:359a826a230e11e3cf0df43f6b155a54,Namespace:kube-system,Attempt:0,}" Jul 14 21:58:07.587055 kubelet[1646]: E0714 21:58:07.587021 1646 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:07.587606 env[1213]: time="2025-07-14T21:58:07.587562607Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:0613557c150e4f35d1f3f822b5f32ff1,Namespace:kube-system,Attempt:0,}" Jul 14 21:58:07.589857 kubelet[1646]: E0714 21:58:07.589837 1646 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:07.590267 env[1213]: time="2025-07-14T21:58:07.590239648Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:d4a6b755cb4739fbca401212ebb82b6d,Namespace:kube-system,Attempt:0,}" Jul 14 21:58:07.740239 kubelet[1646]: E0714 21:58:07.740187 1646 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.76:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.76:6443: connect: connection refused" interval="800ms" Jul 14 21:58:07.891984 kubelet[1646]: I0714 21:58:07.890825 1646 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 14 21:58:07.891984 kubelet[1646]: E0714 21:58:07.891967 1646 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.76:6443/api/v1/nodes\": dial tcp 10.0.0.76:6443: connect: connection refused" node="localhost" Jul 14 21:58:08.059299 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1488071630.mount: Deactivated successfully. Jul 14 21:58:08.066534 env[1213]: time="2025-07-14T21:58:08.066494269Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:08.070537 env[1213]: time="2025-07-14T21:58:08.070153547Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:08.073443 env[1213]: time="2025-07-14T21:58:08.073117596Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:08.074582 env[1213]: time="2025-07-14T21:58:08.074545898Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:08.077992 env[1213]: time="2025-07-14T21:58:08.077965446Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:08.079785 env[1213]: time="2025-07-14T21:58:08.079758043Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:08.081287 env[1213]: time="2025-07-14T21:58:08.081252828Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:08.083116 env[1213]: time="2025-07-14T21:58:08.083083148Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:08.085171 env[1213]: time="2025-07-14T21:58:08.085145117Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:08.085988 env[1213]: time="2025-07-14T21:58:08.085959992Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:08.087395 env[1213]: time="2025-07-14T21:58:08.087371733Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:08.089466 env[1213]: time="2025-07-14T21:58:08.089438343Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:08.119230 env[1213]: time="2025-07-14T21:58:08.118663289Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 21:58:08.119230 env[1213]: time="2025-07-14T21:58:08.118700571Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 21:58:08.119230 env[1213]: time="2025-07-14T21:58:08.118710932Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 21:58:08.119230 env[1213]: time="2025-07-14T21:58:08.118930861Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/78a0fb9c6d76396d48ecfdff7da93b65b87924a9ee665a2ee1c8a74e2e7ce8d3 pid=1695 runtime=io.containerd.runc.v2 Jul 14 21:58:08.120883 kubelet[1646]: W0714 21:58:08.120800 1646 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.76:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.76:6443: connect: connection refused Jul 14 21:58:08.120981 kubelet[1646]: E0714 21:58:08.120914 1646 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.76:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.76:6443: connect: connection refused" logger="UnhandledError" Jul 14 21:58:08.121612 env[1213]: time="2025-07-14T21:58:08.121528454Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 21:58:08.121612 env[1213]: time="2025-07-14T21:58:08.121563815Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 21:58:08.121612 env[1213]: time="2025-07-14T21:58:08.121574536Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 21:58:08.122092 env[1213]: time="2025-07-14T21:58:08.121876869Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d63f7c4bd3800c0a849b9c56540a7388c5b85b99c77a4a91606db5c0d205fac0 pid=1694 runtime=io.containerd.runc.v2 Jul 14 21:58:08.127699 env[1213]: time="2025-07-14T21:58:08.127516873Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 21:58:08.127699 env[1213]: time="2025-07-14T21:58:08.127549715Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 21:58:08.127699 env[1213]: time="2025-07-14T21:58:08.127559715Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 21:58:08.127812 env[1213]: time="2025-07-14T21:58:08.127728362Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/db8e7191ce4af24f178302eb56c4c827e404dbab5fb332eb4aa92409cc57b037 pid=1725 runtime=io.containerd.runc.v2 Jul 14 21:58:08.133650 systemd[1]: Started cri-containerd-78a0fb9c6d76396d48ecfdff7da93b65b87924a9ee665a2ee1c8a74e2e7ce8d3.scope. Jul 14 21:58:08.134573 systemd[1]: Started cri-containerd-d63f7c4bd3800c0a849b9c56540a7388c5b85b99c77a4a91606db5c0d205fac0.scope. Jul 14 21:58:08.161113 systemd[1]: Started cri-containerd-db8e7191ce4af24f178302eb56c4c827e404dbab5fb332eb4aa92409cc57b037.scope. Jul 14 21:58:08.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.167000 audit: BPF prog-id=55 op=LOAD Jul 14 21:58:08.168000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.168000 audit[1716]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1695 pid=1716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.168000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738613066623963366437363339366434386563666466663764613933 Jul 14 21:58:08.168000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.168000 audit[1716]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1695 pid=1716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.168000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738613066623963366437363339366434386563666466663764613933 Jul 14 21:58:08.168000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.168000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.168000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.168000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.168000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.168000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.168000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.168000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.168000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.168000 audit: BPF prog-id=56 op=LOAD Jul 14 21:58:08.168000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.168000 audit: BPF prog-id=57 op=LOAD Jul 14 21:58:08.168000 audit[1716]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1695 pid=1716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.168000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738613066623963366437363339366434386563666466663764613933 Jul 14 21:58:08.169000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit[1726]: AVC avc: denied { bpf } for pid=1726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit[1726]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1694 pid=1726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.169000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436336637633462643338303063306138343962396335363534306137 Jul 14 21:58:08.169000 audit[1726]: AVC avc: denied { perfmon } for pid=1726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit[1726]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1694 pid=1726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.169000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436336637633462643338303063306138343962396335363534306137 Jul 14 21:58:08.169000 audit[1726]: AVC avc: denied { bpf } for pid=1726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit[1726]: AVC avc: denied { bpf } for pid=1726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit[1726]: AVC avc: denied { bpf } for pid=1726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit[1726]: AVC avc: denied { perfmon } for pid=1726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit[1726]: AVC avc: denied { perfmon } for pid=1726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit[1726]: AVC avc: denied { perfmon } for pid=1726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit[1726]: AVC avc: denied { perfmon } for pid=1726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit[1726]: AVC avc: denied { perfmon } for pid=1726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit[1726]: AVC avc: denied { bpf } for pid=1726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit[1726]: AVC avc: denied { bpf } for pid=1726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit: BPF prog-id=58 op=LOAD Jul 14 21:58:08.169000 audit[1726]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1694 pid=1726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.169000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436336637633462643338303063306138343962396335363534306137 Jul 14 21:58:08.169000 audit[1726]: AVC avc: denied { bpf } for pid=1726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit[1726]: AVC avc: denied { bpf } for pid=1726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit[1726]: AVC avc: denied { perfmon } for pid=1726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit[1726]: AVC avc: denied { perfmon } for pid=1726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit[1726]: AVC avc: denied { perfmon } for pid=1726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit[1726]: AVC avc: denied { perfmon } for pid=1726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit[1726]: AVC avc: denied { perfmon } for pid=1726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit[1726]: AVC avc: denied { bpf } for pid=1726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit: BPF prog-id=59 op=LOAD Jul 14 21:58:08.169000 audit[1726]: AVC avc: denied { bpf } for pid=1726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.169000 audit: BPF prog-id=60 op=LOAD Jul 14 21:58:08.169000 audit[1726]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1694 pid=1726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.169000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436336637633462643338303063306138343962396335363534306137 Jul 14 21:58:08.171000 audit: BPF prog-id=60 op=UNLOAD Jul 14 21:58:08.171000 audit: BPF prog-id=58 op=UNLOAD Jul 14 21:58:08.171000 audit[1726]: AVC avc: denied { bpf } for pid=1726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.171000 audit[1726]: AVC avc: denied { bpf } for pid=1726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.171000 audit[1726]: AVC avc: denied { bpf } for pid=1726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.171000 audit[1726]: AVC avc: denied { perfmon } for pid=1726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.171000 audit[1726]: AVC avc: denied { perfmon } for pid=1726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.171000 audit[1726]: AVC avc: denied { perfmon } for pid=1726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.171000 audit[1726]: AVC avc: denied { perfmon } for pid=1726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.171000 audit[1726]: AVC avc: denied { perfmon } for pid=1726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.171000 audit[1726]: AVC avc: denied { bpf } for pid=1726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.171000 audit[1726]: AVC avc: denied { bpf } for pid=1726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.171000 audit: BPF prog-id=61 op=LOAD Jul 14 21:58:08.171000 audit[1726]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1694 pid=1726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436336637633462643338303063306138343962396335363534306137 Jul 14 21:58:08.169000 audit[1716]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1695 pid=1716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.169000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738613066623963366437363339366434386563666466663764613933 Jul 14 21:58:08.172000 audit: BPF prog-id=59 op=UNLOAD Jul 14 21:58:08.172000 audit: BPF prog-id=57 op=UNLOAD Jul 14 21:58:08.172000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.172000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.172000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.172000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.172000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.172000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.172000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.172000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.172000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.172000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.172000 audit: BPF prog-id=62 op=LOAD Jul 14 21:58:08.172000 audit[1716]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1695 pid=1716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738613066623963366437363339366434386563666466663764613933 Jul 14 21:58:08.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.179000 audit: BPF prog-id=63 op=LOAD Jul 14 21:58:08.180000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.180000 audit[1749]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=1725 pid=1749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462386537313931636534616632346631373833303265623536633463 Jul 14 21:58:08.180000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.180000 audit[1749]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=1725 pid=1749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462386537313931636534616632346631373833303265623536633463 Jul 14 21:58:08.180000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.180000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.180000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.180000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.180000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.180000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.180000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.180000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.180000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.180000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.180000 audit: BPF prog-id=64 op=LOAD Jul 14 21:58:08.180000 audit[1749]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=1725 pid=1749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462386537313931636534616632346631373833303265623536633463 Jul 14 21:58:08.181000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.181000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.181000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.181000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.181000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.181000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.181000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.181000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.181000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.181000 audit: BPF prog-id=65 op=LOAD Jul 14 21:58:08.181000 audit[1749]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=1725 pid=1749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.181000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462386537313931636534616632346631373833303265623536633463 Jul 14 21:58:08.182000 audit: BPF prog-id=65 op=UNLOAD Jul 14 21:58:08.182000 audit: BPF prog-id=64 op=UNLOAD Jul 14 21:58:08.182000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.182000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.182000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.182000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.182000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.182000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.182000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.182000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.182000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.182000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.182000 audit: BPF prog-id=66 op=LOAD Jul 14 21:58:08.182000 audit[1749]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=1725 pid=1749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.182000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462386537313931636534616632346631373833303265623536633463 Jul 14 21:58:08.197748 env[1213]: time="2025-07-14T21:58:08.196326335Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:d4a6b755cb4739fbca401212ebb82b6d,Namespace:kube-system,Attempt:0,} returns sandbox id \"78a0fb9c6d76396d48ecfdff7da93b65b87924a9ee665a2ee1c8a74e2e7ce8d3\"" Jul 14 21:58:08.197872 kubelet[1646]: E0714 21:58:08.197214 1646 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:08.198611 env[1213]: time="2025-07-14T21:58:08.198579633Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:0613557c150e4f35d1f3f822b5f32ff1,Namespace:kube-system,Attempt:0,} returns sandbox id \"d63f7c4bd3800c0a849b9c56540a7388c5b85b99c77a4a91606db5c0d205fac0\"" Jul 14 21:58:08.200085 kubelet[1646]: E0714 21:58:08.200062 1646 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:08.201585 env[1213]: time="2025-07-14T21:58:08.201555562Z" level=info msg="CreateContainer within sandbox \"d63f7c4bd3800c0a849b9c56540a7388c5b85b99c77a4a91606db5c0d205fac0\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 14 21:58:08.201671 env[1213]: time="2025-07-14T21:58:08.201566442Z" level=info msg="CreateContainer within sandbox \"78a0fb9c6d76396d48ecfdff7da93b65b87924a9ee665a2ee1c8a74e2e7ce8d3\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 14 21:58:08.211695 env[1213]: time="2025-07-14T21:58:08.211643199Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:359a826a230e11e3cf0df43f6b155a54,Namespace:kube-system,Attempt:0,} returns sandbox id \"db8e7191ce4af24f178302eb56c4c827e404dbab5fb332eb4aa92409cc57b037\"" Jul 14 21:58:08.212465 kubelet[1646]: E0714 21:58:08.212430 1646 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:08.215790 env[1213]: time="2025-07-14T21:58:08.215756217Z" level=info msg="CreateContainer within sandbox \"d63f7c4bd3800c0a849b9c56540a7388c5b85b99c77a4a91606db5c0d205fac0\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"bf8c8226084cea50628c6b03a150ec990716379a8406a8af3954ed3480ec6716\"" Jul 14 21:58:08.216392 env[1213]: time="2025-07-14T21:58:08.216365803Z" level=info msg="StartContainer for \"bf8c8226084cea50628c6b03a150ec990716379a8406a8af3954ed3480ec6716\"" Jul 14 21:58:08.217127 env[1213]: time="2025-07-14T21:58:08.217088035Z" level=info msg="CreateContainer within sandbox \"db8e7191ce4af24f178302eb56c4c827e404dbab5fb332eb4aa92409cc57b037\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 14 21:58:08.223035 env[1213]: time="2025-07-14T21:58:08.222998651Z" level=info msg="CreateContainer within sandbox \"78a0fb9c6d76396d48ecfdff7da93b65b87924a9ee665a2ee1c8a74e2e7ce8d3\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"41730ec5bf9b0852c53d5a481706f7b6bf9242409efc07aad4413d8a98dadee9\"" Jul 14 21:58:08.223601 env[1213]: time="2025-07-14T21:58:08.223569796Z" level=info msg="StartContainer for \"41730ec5bf9b0852c53d5a481706f7b6bf9242409efc07aad4413d8a98dadee9\"" Jul 14 21:58:08.229061 env[1213]: time="2025-07-14T21:58:08.229028712Z" level=info msg="CreateContainer within sandbox \"db8e7191ce4af24f178302eb56c4c827e404dbab5fb332eb4aa92409cc57b037\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"4c6cc8faa57ef939faba2cefe237441b976f20d5e95427afe26d989b46d3c058\"" Jul 14 21:58:08.229676 env[1213]: time="2025-07-14T21:58:08.229647819Z" level=info msg="StartContainer for \"4c6cc8faa57ef939faba2cefe237441b976f20d5e95427afe26d989b46d3c058\"" Jul 14 21:58:08.231745 systemd[1]: Started cri-containerd-bf8c8226084cea50628c6b03a150ec990716379a8406a8af3954ed3480ec6716.scope. Jul 14 21:58:08.248847 systemd[1]: Started cri-containerd-41730ec5bf9b0852c53d5a481706f7b6bf9242409efc07aad4413d8a98dadee9.scope. Jul 14 21:58:08.262515 systemd[1]: Started cri-containerd-4c6cc8faa57ef939faba2cefe237441b976f20d5e95427afe26d989b46d3c058.scope. Jul 14 21:58:08.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.289000 audit: BPF prog-id=67 op=LOAD Jul 14 21:58:08.289000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.289000 audit[1826]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=1695 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.289000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431373330656335626639623038353263353364356134383137303666 Jul 14 21:58:08.289000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.289000 audit[1826]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=1695 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.289000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431373330656335626639623038353263353364356134383137303666 Jul 14 21:58:08.289000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.289000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.289000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.289000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.289000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.289000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.289000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.289000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.289000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.289000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.289000 audit: BPF prog-id=68 op=LOAD Jul 14 21:58:08.289000 audit[1826]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=1695 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.289000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431373330656335626639623038353263353364356134383137303666 Jul 14 21:58:08.290000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.290000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.290000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.290000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.290000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.290000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.290000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.290000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.290000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.290000 audit: BPF prog-id=69 op=LOAD Jul 14 21:58:08.290000 audit[1826]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=1695 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.290000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431373330656335626639623038353263353364356134383137303666 Jul 14 21:58:08.290000 audit: BPF prog-id=69 op=UNLOAD Jul 14 21:58:08.290000 audit: BPF prog-id=68 op=UNLOAD Jul 14 21:58:08.290000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.290000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.290000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.290000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.290000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.290000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.290000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.290000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.290000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.290000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.290000 audit: BPF prog-id=70 op=LOAD Jul 14 21:58:08.290000 audit[1826]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=1695 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.290000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431373330656335626639623038353263353364356134383137303666 Jul 14 21:58:08.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.291000 audit: BPF prog-id=71 op=LOAD Jul 14 21:58:08.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.293000 audit: BPF prog-id=72 op=LOAD Jul 14 21:58:08.293000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.293000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1694 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.293000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266386338323236303834636561353036323863366230336131353065 Jul 14 21:58:08.293000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.293000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1694 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.293000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266386338323236303834636561353036323863366230336131353065 Jul 14 21:58:08.293000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.293000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.293000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.293000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.293000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.293000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.293000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.293000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.293000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.293000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.293000 audit: BPF prog-id=73 op=LOAD Jul 14 21:58:08.293000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1694 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.293000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266386338323236303834636561353036323863366230336131353065 Jul 14 21:58:08.294000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.294000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.294000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.294000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.294000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.294000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.294000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.294000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.294000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.294000 audit: BPF prog-id=74 op=LOAD Jul 14 21:58:08.294000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1694 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.294000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266386338323236303834636561353036323863366230336131353065 Jul 14 21:58:08.294000 audit: BPF prog-id=74 op=UNLOAD Jul 14 21:58:08.294000 audit: BPF prog-id=73 op=UNLOAD Jul 14 21:58:08.294000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.294000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.294000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.294000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.294000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.294000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.294000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.294000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.294000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.294000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.294000 audit: BPF prog-id=75 op=LOAD Jul 14 21:58:08.294000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1694 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.294000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266386338323236303834636561353036323863366230336131353065 Jul 14 21:58:08.294000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.294000 audit[1852]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1725 pid=1852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.294000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463366363386661613537656639333966616261326365666532333734 Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit[1852]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1725 pid=1852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463366363386661613537656639333966616261326365666532333734 Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit: BPF prog-id=76 op=LOAD Jul 14 21:58:08.295000 audit[1852]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1725 pid=1852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463366363386661613537656639333966616261326365666532333734 Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit: BPF prog-id=77 op=LOAD Jul 14 21:58:08.295000 audit[1852]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1725 pid=1852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463366363386661613537656639333966616261326365666532333734 Jul 14 21:58:08.295000 audit: BPF prog-id=77 op=UNLOAD Jul 14 21:58:08.295000 audit: BPF prog-id=76 op=UNLOAD Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { perfmon } for pid=1852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit[1852]: AVC avc: denied { bpf } for pid=1852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:08.295000 audit: BPF prog-id=78 op=LOAD Jul 14 21:58:08.295000 audit[1852]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1725 pid=1852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:08.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463366363386661613537656639333966616261326365666532333734 Jul 14 21:58:08.319380 env[1213]: time="2025-07-14T21:58:08.319337626Z" level=info msg="StartContainer for \"41730ec5bf9b0852c53d5a481706f7b6bf9242409efc07aad4413d8a98dadee9\" returns successfully" Jul 14 21:58:08.340142 env[1213]: time="2025-07-14T21:58:08.331486312Z" level=info msg="StartContainer for \"4c6cc8faa57ef939faba2cefe237441b976f20d5e95427afe26d989b46d3c058\" returns successfully" Jul 14 21:58:08.340142 env[1213]: time="2025-07-14T21:58:08.337968673Z" level=info msg="StartContainer for \"bf8c8226084cea50628c6b03a150ec990716379a8406a8af3954ed3480ec6716\" returns successfully" Jul 14 21:58:08.350803 kubelet[1646]: W0714 21:58:08.350082 1646 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.76:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.76:6443: connect: connection refused Jul 14 21:58:08.350803 kubelet[1646]: E0714 21:58:08.350153 1646 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.76:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.76:6443: connect: connection refused" logger="UnhandledError" Jul 14 21:58:08.403769 kubelet[1646]: E0714 21:58:08.403639 1646 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.76:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.76:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.18523d02c68da7bd default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-14 21:58:07.130945469 +0000 UTC m=+0.895402743,LastTimestamp:2025-07-14 21:58:07.130945469 +0000 UTC m=+0.895402743,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 14 21:58:08.693907 kubelet[1646]: I0714 21:58:08.693654 1646 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 14 21:58:09.163000 kubelet[1646]: E0714 21:58:09.162959 1646 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:09.164301 kubelet[1646]: E0714 21:58:09.164278 1646 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:09.165228 kubelet[1646]: E0714 21:58:09.165210 1646 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:10.167119 kubelet[1646]: E0714 21:58:10.167041 1646 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:10.533000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:58:10.533000 audit[1869]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4004070540 a2=fc6 a3=0 items=0 ppid=1725 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 key=(null) Jul 14 21:58:10.533000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 14 21:58:10.533000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:58:10.533000 audit[1869]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40040705a0 a2=fc6 a3=0 items=0 ppid=1725 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 key=(null) Jul 14 21:58:10.533000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 14 21:58:10.535000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:58:10.535000 audit[1869]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=4006ca8060 a2=fc6 a3=0 items=0 ppid=1725 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 key=(null) Jul 14 21:58:10.535000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 14 21:58:10.537000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:58:10.537000 audit[1869]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=5d a1=4006d7a7c0 a2=fc6 a3=0 items=0 ppid=1725 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 key=(null) Jul 14 21:58:10.537000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 14 21:58:10.537000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:58:10.537000 audit[1869]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=5d a1=4006ca8540 a2=fc6 a3=0 items=0 ppid=1725 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 key=(null) Jul 14 21:58:10.537000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 14 21:58:10.545000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:58:10.545000 audit[1869]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8b a1=4005960980 a2=fc6 a3=0 items=0 ppid=1725 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 key=(null) Jul 14 21:58:10.545000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 14 21:58:10.616256 kubelet[1646]: E0714 21:58:10.616220 1646 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Jul 14 21:58:10.678392 kubelet[1646]: I0714 21:58:10.678357 1646 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Jul 14 21:58:10.678552 kubelet[1646]: E0714 21:58:10.678538 1646 kubelet_node_status.go:535] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Jul 14 21:58:10.920000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:58:10.925183 kernel: kauditd_printk_skb: 577 callbacks suppressed Jul 14 21:58:10.925248 kernel: audit: type=1400 audit(1752530290.920:567): avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:58:10.921000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:58:10.928147 kernel: audit: type=1400 audit(1752530290.921:568): avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:58:10.928194 kernel: audit: type=1300 audit(1752530290.921:568): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40003fa040 a2=fc6 a3=0 items=0 ppid=1695 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 key=(null) Jul 14 21:58:10.921000 audit[1862]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40003fa040 a2=fc6 a3=0 items=0 ppid=1695 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 key=(null) Jul 14 21:58:10.921000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 21:58:10.935048 kernel: audit: type=1327 audit(1752530290.921:568): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 21:58:10.935105 kernel: audit: type=1300 audit(1752530290.920:567): arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000a1c000 a2=fc6 a3=0 items=0 ppid=1695 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 key=(null) Jul 14 21:58:10.920000 audit[1862]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000a1c000 a2=fc6 a3=0 items=0 ppid=1695 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 key=(null) Jul 14 21:58:10.920000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 21:58:10.942113 kernel: audit: type=1327 audit(1752530290.920:567): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 21:58:11.127521 kubelet[1646]: I0714 21:58:11.127255 1646 apiserver.go:52] "Watching apiserver" Jul 14 21:58:11.137089 kubelet[1646]: I0714 21:58:11.137035 1646 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Jul 14 21:58:11.172180 kubelet[1646]: E0714 21:58:11.172145 1646 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Jul 14 21:58:11.172670 kubelet[1646]: E0714 21:58:11.172650 1646 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:12.055792 kubelet[1646]: E0714 21:58:12.055762 1646 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:12.168848 kubelet[1646]: E0714 21:58:12.168815 1646 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:12.705180 systemd[1]: Reloading. Jul 14 21:58:12.765624 /usr/lib/systemd/system-generators/torcx-generator[1939]: time="2025-07-14T21:58:12Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.101 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.101 /var/lib/torcx/store]" Jul 14 21:58:12.766032 /usr/lib/systemd/system-generators/torcx-generator[1939]: time="2025-07-14T21:58:12Z" level=info msg="torcx already run" Jul 14 21:58:12.827582 kubelet[1646]: E0714 21:58:12.827555 1646 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:12.829071 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 14 21:58:12.829093 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 14 21:58:12.847493 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 14 21:58:12.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.912176 kernel: audit: type=1400 audit(1752530292.906:569): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.912255 kernel: audit: type=1400 audit(1752530292.906:570): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.912276 kernel: audit: type=1400 audit(1752530292.906:571): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.915881 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 14 21:58:12.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.909000 audit: BPF prog-id=79 op=LOAD Jul 14 21:58:12.909000 audit: BPF prog-id=40 op=UNLOAD Jul 14 21:58:12.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.911000 audit: BPF prog-id=80 op=LOAD Jul 14 21:58:12.911000 audit: BPF prog-id=56 op=UNLOAD Jul 14 21:58:12.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.913000 audit: BPF prog-id=81 op=LOAD Jul 14 21:58:12.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.913000 audit: BPF prog-id=82 op=LOAD Jul 14 21:58:12.913000 audit: BPF prog-id=41 op=UNLOAD Jul 14 21:58:12.913000 audit: BPF prog-id=42 op=UNLOAD Jul 14 21:58:12.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.914000 audit: BPF prog-id=83 op=LOAD Jul 14 21:58:12.914000 audit: BPF prog-id=43 op=UNLOAD Jul 14 21:58:12.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.914000 audit: BPF prog-id=84 op=LOAD Jul 14 21:58:12.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.917000 audit: BPF prog-id=88 op=LOAD Jul 14 21:58:12.917000 audit: BPF prog-id=46 op=UNLOAD Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.918000 audit: BPF prog-id=89 op=LOAD Jul 14 21:58:12.918000 audit: BPF prog-id=47 op=UNLOAD Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.918000 audit: BPF prog-id=90 op=LOAD Jul 14 21:58:12.918000 audit: BPF prog-id=48 op=UNLOAD Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.918000 audit: BPF prog-id=91 op=LOAD Jul 14 21:58:12.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.919000 audit: BPF prog-id=92 op=LOAD Jul 14 21:58:12.919000 audit: BPF prog-id=49 op=UNLOAD Jul 14 21:58:12.919000 audit: BPF prog-id=50 op=UNLOAD Jul 14 21:58:12.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.920000 audit: BPF prog-id=93 op=LOAD Jul 14 21:58:12.920000 audit: BPF prog-id=51 op=UNLOAD Jul 14 21:58:12.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.920000 audit: BPF prog-id=94 op=LOAD Jul 14 21:58:12.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.920000 audit: BPF prog-id=95 op=LOAD Jul 14 21:58:12.920000 audit: BPF prog-id=52 op=UNLOAD Jul 14 21:58:12.920000 audit: BPF prog-id=53 op=UNLOAD Jul 14 21:58:12.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.921000 audit: BPF prog-id=96 op=LOAD Jul 14 21:58:12.921000 audit: BPF prog-id=63 op=UNLOAD Jul 14 21:58:12.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.921000 audit: BPF prog-id=97 op=LOAD Jul 14 21:58:12.922000 audit: BPF prog-id=72 op=UNLOAD Jul 14 21:58:12.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.922000 audit: BPF prog-id=98 op=LOAD Jul 14 21:58:12.922000 audit: BPF prog-id=54 op=UNLOAD Jul 14 21:58:12.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:12.923000 audit: BPF prog-id=99 op=LOAD Jul 14 21:58:12.923000 audit: BPF prog-id=71 op=UNLOAD Jul 14 21:58:12.933995 systemd[1]: Stopping kubelet.service... Jul 14 21:58:12.963291 systemd[1]: kubelet.service: Deactivated successfully. Jul 14 21:58:12.964030 systemd[1]: Stopped kubelet.service. Jul 14 21:58:12.963000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:58:12.964147 systemd[1]: kubelet.service: Consumed 1.320s CPU time. Jul 14 21:58:12.968687 systemd[1]: Starting kubelet.service... Jul 14 21:58:13.061294 systemd[1]: Started kubelet.service. Jul 14 21:58:13.060000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:58:13.095169 kubelet[1982]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 14 21:58:13.095169 kubelet[1982]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 14 21:58:13.095169 kubelet[1982]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 14 21:58:13.095579 kubelet[1982]: I0714 21:58:13.095274 1982 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 14 21:58:13.104252 kubelet[1982]: I0714 21:58:13.104201 1982 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Jul 14 21:58:13.104252 kubelet[1982]: I0714 21:58:13.104227 1982 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 14 21:58:13.105524 kubelet[1982]: I0714 21:58:13.105504 1982 server.go:934] "Client rotation is on, will bootstrap in background" Jul 14 21:58:13.106801 kubelet[1982]: I0714 21:58:13.106784 1982 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 14 21:58:13.109544 kubelet[1982]: I0714 21:58:13.109520 1982 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 14 21:58:13.112643 kubelet[1982]: E0714 21:58:13.112619 1982 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 14 21:58:13.112767 kubelet[1982]: I0714 21:58:13.112753 1982 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 14 21:58:13.115235 kubelet[1982]: I0714 21:58:13.115204 1982 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 14 21:58:13.115339 kubelet[1982]: I0714 21:58:13.115325 1982 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Jul 14 21:58:13.115449 kubelet[1982]: I0714 21:58:13.115430 1982 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 14 21:58:13.115822 kubelet[1982]: I0714 21:58:13.115450 1982 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 14 21:58:13.115931 kubelet[1982]: I0714 21:58:13.115833 1982 topology_manager.go:138] "Creating topology manager with none policy" Jul 14 21:58:13.115931 kubelet[1982]: I0714 21:58:13.115842 1982 container_manager_linux.go:300] "Creating device plugin manager" Jul 14 21:58:13.115931 kubelet[1982]: I0714 21:58:13.115896 1982 state_mem.go:36] "Initialized new in-memory state store" Jul 14 21:58:13.116004 kubelet[1982]: I0714 21:58:13.115986 1982 kubelet.go:408] "Attempting to sync node with API server" Jul 14 21:58:13.116004 kubelet[1982]: I0714 21:58:13.115998 1982 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 14 21:58:13.116050 kubelet[1982]: I0714 21:58:13.116014 1982 kubelet.go:314] "Adding apiserver pod source" Jul 14 21:58:13.116050 kubelet[1982]: I0714 21:58:13.116025 1982 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 14 21:58:13.117244 kubelet[1982]: I0714 21:58:13.117221 1982 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 14 21:58:13.117747 kubelet[1982]: I0714 21:58:13.117725 1982 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 14 21:58:13.118191 kubelet[1982]: I0714 21:58:13.118171 1982 server.go:1274] "Started kubelet" Jul 14 21:58:13.119000 audit[1982]: AVC avc: denied { mac_admin } for pid=1982 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:13.119000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 21:58:13.119000 audit[1982]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000e14090 a1=4000d68660 a2=4000e14060 a3=25 items=0 ppid=1 pid=1982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:13.119000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 21:58:13.119000 audit[1982]: AVC avc: denied { mac_admin } for pid=1982 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:13.119000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 21:58:13.119000 audit[1982]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b8f8c0 a1=4000d68678 a2=4000e14120 a3=25 items=0 ppid=1 pid=1982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:13.119000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 21:58:13.121023 kubelet[1982]: I0714 21:58:13.120636 1982 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 14 21:58:13.121023 kubelet[1982]: I0714 21:58:13.120684 1982 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 14 21:58:13.121023 kubelet[1982]: I0714 21:58:13.120712 1982 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 14 21:58:13.123682 kubelet[1982]: I0714 21:58:13.123644 1982 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Jul 14 21:58:13.124597 kubelet[1982]: I0714 21:58:13.124573 1982 server.go:449] "Adding debug handlers to kubelet server" Jul 14 21:58:13.125645 kubelet[1982]: I0714 21:58:13.125588 1982 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 14 21:58:13.125801 kubelet[1982]: I0714 21:58:13.125783 1982 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 14 21:58:13.126012 kubelet[1982]: I0714 21:58:13.125990 1982 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 14 21:58:13.131560 kubelet[1982]: E0714 21:58:13.131538 1982 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 14 21:58:13.140485 kubelet[1982]: I0714 21:58:13.140453 1982 volume_manager.go:289] "Starting Kubelet Volume Manager" Jul 14 21:58:13.140784 kubelet[1982]: I0714 21:58:13.140765 1982 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Jul 14 21:58:13.141095 kubelet[1982]: E0714 21:58:13.140825 1982 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 21:58:13.141205 kubelet[1982]: I0714 21:58:13.140997 1982 reconciler.go:26] "Reconciler: start to sync state" Jul 14 21:58:13.141305 kubelet[1982]: I0714 21:58:13.141277 1982 factory.go:221] Registration of the systemd container factory successfully Jul 14 21:58:13.143248 kubelet[1982]: I0714 21:58:13.142612 1982 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 14 21:58:13.144209 kubelet[1982]: I0714 21:58:13.144183 1982 factory.go:221] Registration of the containerd container factory successfully Jul 14 21:58:13.146696 kubelet[1982]: I0714 21:58:13.146667 1982 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 14 21:58:13.148429 kubelet[1982]: I0714 21:58:13.148408 1982 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 14 21:58:13.148574 kubelet[1982]: I0714 21:58:13.148561 1982 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 14 21:58:13.148648 kubelet[1982]: I0714 21:58:13.148638 1982 kubelet.go:2321] "Starting kubelet main sync loop" Jul 14 21:58:13.148803 kubelet[1982]: E0714 21:58:13.148783 1982 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 14 21:58:13.171584 kubelet[1982]: I0714 21:58:13.171556 1982 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 14 21:58:13.171736 kubelet[1982]: I0714 21:58:13.171720 1982 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 14 21:58:13.171813 kubelet[1982]: I0714 21:58:13.171803 1982 state_mem.go:36] "Initialized new in-memory state store" Jul 14 21:58:13.172034 kubelet[1982]: I0714 21:58:13.172016 1982 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 14 21:58:13.172116 kubelet[1982]: I0714 21:58:13.172090 1982 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 14 21:58:13.172193 kubelet[1982]: I0714 21:58:13.172182 1982 policy_none.go:49] "None policy: Start" Jul 14 21:58:13.172886 kubelet[1982]: I0714 21:58:13.172841 1982 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 14 21:58:13.172886 kubelet[1982]: I0714 21:58:13.172876 1982 state_mem.go:35] "Initializing new in-memory state store" Jul 14 21:58:13.173031 kubelet[1982]: I0714 21:58:13.173015 1982 state_mem.go:75] "Updated machine memory state" Jul 14 21:58:13.176283 kubelet[1982]: I0714 21:58:13.176261 1982 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 14 21:58:13.175000 audit[1982]: AVC avc: denied { mac_admin } for pid=1982 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:13.175000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 21:58:13.175000 audit[1982]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40011c4090 a1=40011c0960 a2=40011c4060 a3=25 items=0 ppid=1 pid=1982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:13.175000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 21:58:13.177949 kubelet[1982]: I0714 21:58:13.177923 1982 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 14 21:58:13.178165 kubelet[1982]: I0714 21:58:13.178147 1982 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 14 21:58:13.178276 kubelet[1982]: I0714 21:58:13.178235 1982 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 14 21:58:13.178476 kubelet[1982]: I0714 21:58:13.178458 1982 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 14 21:58:13.255881 kubelet[1982]: E0714 21:58:13.255831 1982 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Jul 14 21:58:13.256507 kubelet[1982]: E0714 21:58:13.256486 1982 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Jul 14 21:58:13.281523 kubelet[1982]: I0714 21:58:13.281506 1982 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 14 21:58:13.288445 kubelet[1982]: I0714 21:58:13.288423 1982 kubelet_node_status.go:111] "Node was previously registered" node="localhost" Jul 14 21:58:13.288607 kubelet[1982]: I0714 21:58:13.288596 1982 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Jul 14 21:58:13.443087 kubelet[1982]: I0714 21:58:13.443048 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/359a826a230e11e3cf0df43f6b155a54-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"359a826a230e11e3cf0df43f6b155a54\") " pod="kube-system/kube-apiserver-localhost" Jul 14 21:58:13.443238 kubelet[1982]: I0714 21:58:13.443091 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d4a6b755cb4739fbca401212ebb82b6d-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d4a6b755cb4739fbca401212ebb82b6d\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 21:58:13.443238 kubelet[1982]: I0714 21:58:13.443118 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d4a6b755cb4739fbca401212ebb82b6d-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"d4a6b755cb4739fbca401212ebb82b6d\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 21:58:13.443238 kubelet[1982]: I0714 21:58:13.443135 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d4a6b755cb4739fbca401212ebb82b6d-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d4a6b755cb4739fbca401212ebb82b6d\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 21:58:13.443238 kubelet[1982]: I0714 21:58:13.443162 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/0613557c150e4f35d1f3f822b5f32ff1-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"0613557c150e4f35d1f3f822b5f32ff1\") " pod="kube-system/kube-scheduler-localhost" Jul 14 21:58:13.443238 kubelet[1982]: I0714 21:58:13.443194 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/359a826a230e11e3cf0df43f6b155a54-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"359a826a230e11e3cf0df43f6b155a54\") " pod="kube-system/kube-apiserver-localhost" Jul 14 21:58:13.443487 kubelet[1982]: I0714 21:58:13.443222 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/359a826a230e11e3cf0df43f6b155a54-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"359a826a230e11e3cf0df43f6b155a54\") " pod="kube-system/kube-apiserver-localhost" Jul 14 21:58:13.443487 kubelet[1982]: I0714 21:58:13.443263 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d4a6b755cb4739fbca401212ebb82b6d-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"d4a6b755cb4739fbca401212ebb82b6d\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 21:58:13.443487 kubelet[1982]: I0714 21:58:13.443297 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d4a6b755cb4739fbca401212ebb82b6d-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"d4a6b755cb4739fbca401212ebb82b6d\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 21:58:13.557225 kubelet[1982]: E0714 21:58:13.557121 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:13.557225 kubelet[1982]: E0714 21:58:13.557140 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:13.557225 kubelet[1982]: E0714 21:58:13.557209 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:14.117088 kubelet[1982]: I0714 21:58:14.117062 1982 apiserver.go:52] "Watching apiserver" Jul 14 21:58:14.142041 kubelet[1982]: I0714 21:58:14.141996 1982 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Jul 14 21:58:14.158528 kubelet[1982]: E0714 21:58:14.158495 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:14.158637 kubelet[1982]: E0714 21:58:14.158594 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:14.158716 kubelet[1982]: E0714 21:58:14.158691 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:14.183292 kubelet[1982]: I0714 21:58:14.183236 1982 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=2.18322246 podStartE2EDuration="2.18322246s" podCreationTimestamp="2025-07-14 21:58:12 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 21:58:14.176633755 +0000 UTC m=+1.112432338" watchObservedRunningTime="2025-07-14 21:58:14.18322246 +0000 UTC m=+1.119021043" Jul 14 21:58:14.191369 kubelet[1982]: I0714 21:58:14.191322 1982 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=2.191311216 podStartE2EDuration="2.191311216s" podCreationTimestamp="2025-07-14 21:58:12 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 21:58:14.183463908 +0000 UTC m=+1.119262491" watchObservedRunningTime="2025-07-14 21:58:14.191311216 +0000 UTC m=+1.127109799" Jul 14 21:58:14.198446 kubelet[1982]: I0714 21:58:14.198403 1982 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.198391098 podStartE2EDuration="1.198391098s" podCreationTimestamp="2025-07-14 21:58:13 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 21:58:14.191283535 +0000 UTC m=+1.127082158" watchObservedRunningTime="2025-07-14 21:58:14.198391098 +0000 UTC m=+1.134189681" Jul 14 21:58:15.160114 kubelet[1982]: E0714 21:58:15.160079 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:15.919000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=7301 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 14 21:58:15.919000 audit[1862]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400068ce40 a2=fc6 a3=0 items=0 ppid=1695 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 key=(null) Jul 14 21:58:15.919000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 21:58:16.412192 kubelet[1982]: E0714 21:58:16.412153 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:16.618000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:58:16.619929 kernel: kauditd_printk_skb: 329 callbacks suppressed Jul 14 21:58:16.620006 kernel: audit: type=1400 audit(1752530296.618:783): avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:58:16.618000 audit[1862]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000c92080 a2=fc6 a3=0 items=0 ppid=1695 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 key=(null) Jul 14 21:58:16.627080 kernel: audit: type=1300 audit(1752530296.618:783): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000c92080 a2=fc6 a3=0 items=0 ppid=1695 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 key=(null) Jul 14 21:58:16.627131 kernel: audit: type=1327 audit(1752530296.618:783): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 21:58:16.618000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 21:58:16.621000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:58:16.633540 kernel: audit: type=1400 audit(1752530296.621:784): avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:58:16.633591 kernel: audit: type=1300 audit(1752530296.621:784): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a83d40 a2=fc6 a3=0 items=0 ppid=1695 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 key=(null) Jul 14 21:58:16.621000 audit[1862]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a83d40 a2=fc6 a3=0 items=0 ppid=1695 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 key=(null) Jul 14 21:58:16.621000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 21:58:16.640998 kernel: audit: type=1327 audit(1752530296.621:784): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 21:58:16.641048 kernel: audit: type=1400 audit(1752530296.621:785): avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:58:16.621000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:58:16.621000 audit[1862]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000bd32e0 a2=fc6 a3=0 items=0 ppid=1695 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 key=(null) Jul 14 21:58:16.647881 kernel: audit: type=1300 audit(1752530296.621:785): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000bd32e0 a2=fc6 a3=0 items=0 ppid=1695 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 key=(null) Jul 14 21:58:16.647925 kernel: audit: type=1327 audit(1752530296.621:785): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 21:58:16.621000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 21:58:16.621000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:58:16.654335 kernel: audit: type=1400 audit(1752530296.621:786): avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:58:16.621000 audit[1862]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a83fa0 a2=fc6 a3=0 items=0 ppid=1695 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 key=(null) Jul 14 21:58:16.621000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 21:58:18.089907 kubelet[1982]: I0714 21:58:18.089872 1982 kuberuntime_manager.go:1635] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 14 21:58:18.090302 env[1213]: time="2025-07-14T21:58:18.090177491Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 14 21:58:18.090479 kubelet[1982]: I0714 21:58:18.090371 1982 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 14 21:58:18.492912 kubelet[1982]: W0714 21:58:18.492874 1982 reflector.go:561] object-"kube-system"/"kube-proxy": failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Jul 14 21:58:18.493055 kubelet[1982]: E0714 21:58:18.492917 1982 reflector.go:158] "Unhandled Error" err="object-\"kube-system\"/\"kube-proxy\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"kube-proxy\" is forbidden: User \"system:node:localhost\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"kube-system\": no relationship found between node 'localhost' and this object" logger="UnhandledError" Jul 14 21:58:18.493699 kubelet[1982]: W0714 21:58:18.493379 1982 reflector.go:561] object-"kube-system"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Jul 14 21:58:18.493699 kubelet[1982]: E0714 21:58:18.493419 1982 reflector.go:158] "Unhandled Error" err="object-\"kube-system\"/\"kube-root-ca.crt\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"kube-root-ca.crt\" is forbidden: User \"system:node:localhost\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"kube-system\": no relationship found between node 'localhost' and this object" logger="UnhandledError" Jul 14 21:58:18.495492 systemd[1]: Created slice kubepods-besteffort-podd3a935e2_f028_48f3_b72b_b2d09946ad75.slice. Jul 14 21:58:18.576971 kubelet[1982]: I0714 21:58:18.576914 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/d3a935e2-f028-48f3-b72b-b2d09946ad75-kube-proxy\") pod \"kube-proxy-thh5f\" (UID: \"d3a935e2-f028-48f3-b72b-b2d09946ad75\") " pod="kube-system/kube-proxy-thh5f" Jul 14 21:58:18.576971 kubelet[1982]: I0714 21:58:18.576964 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/d3a935e2-f028-48f3-b72b-b2d09946ad75-xtables-lock\") pod \"kube-proxy-thh5f\" (UID: \"d3a935e2-f028-48f3-b72b-b2d09946ad75\") " pod="kube-system/kube-proxy-thh5f" Jul 14 21:58:18.577153 kubelet[1982]: I0714 21:58:18.576984 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/d3a935e2-f028-48f3-b72b-b2d09946ad75-lib-modules\") pod \"kube-proxy-thh5f\" (UID: \"d3a935e2-f028-48f3-b72b-b2d09946ad75\") " pod="kube-system/kube-proxy-thh5f" Jul 14 21:58:18.577153 kubelet[1982]: I0714 21:58:18.577003 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-92dmc\" (UniqueName: \"kubernetes.io/projected/d3a935e2-f028-48f3-b72b-b2d09946ad75-kube-api-access-92dmc\") pod \"kube-proxy-thh5f\" (UID: \"d3a935e2-f028-48f3-b72b-b2d09946ad75\") " pod="kube-system/kube-proxy-thh5f" Jul 14 21:58:19.325003 kubelet[1982]: I0714 21:58:19.324960 1982 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 14 21:58:19.643068 kubelet[1982]: E0714 21:58:19.642759 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:19.677880 kubelet[1982]: E0714 21:58:19.677828 1982 configmap.go:193] Couldn't get configMap kube-system/kube-proxy: failed to sync configmap cache: timed out waiting for the condition Jul 14 21:58:19.678143 kubelet[1982]: E0714 21:58:19.678125 1982 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/d3a935e2-f028-48f3-b72b-b2d09946ad75-kube-proxy podName:d3a935e2-f028-48f3-b72b-b2d09946ad75 nodeName:}" failed. No retries permitted until 2025-07-14 21:58:20.178095824 +0000 UTC m=+7.113894407 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-proxy" (UniqueName: "kubernetes.io/configmap/d3a935e2-f028-48f3-b72b-b2d09946ad75-kube-proxy") pod "kube-proxy-thh5f" (UID: "d3a935e2-f028-48f3-b72b-b2d09946ad75") : failed to sync configmap cache: timed out waiting for the condition Jul 14 21:58:20.169515 kubelet[1982]: E0714 21:58:20.169487 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:20.302356 kubelet[1982]: E0714 21:58:20.302310 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:20.302926 env[1213]: time="2025-07-14T21:58:20.302873122Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-thh5f,Uid:d3a935e2-f028-48f3-b72b-b2d09946ad75,Namespace:kube-system,Attempt:0,}" Jul 14 21:58:20.317160 env[1213]: time="2025-07-14T21:58:20.317068519Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 21:58:20.317160 env[1213]: time="2025-07-14T21:58:20.317125040Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 21:58:20.317363 env[1213]: time="2025-07-14T21:58:20.317147681Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 21:58:20.317363 env[1213]: time="2025-07-14T21:58:20.317292565Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/201d5cc1dcde46fd7b4734d0f191f7cd14c42105afc7a5fd7793700593775968 pid=2030 runtime=io.containerd.runc.v2 Jul 14 21:58:20.332096 systemd[1]: Started cri-containerd-201d5cc1dcde46fd7b4734d0f191f7cd14c42105afc7a5fd7793700593775968.scope. Jul 14 21:58:20.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.352000 audit: BPF prog-id=100 op=LOAD Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { bpf } for pid=2039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit[2039]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2030 pid=2039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.353000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230316435636331646364653436666437623437333464306631393166 Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { perfmon } for pid=2039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit[2039]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2030 pid=2039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.353000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230316435636331646364653436666437623437333464306631393166 Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { bpf } for pid=2039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { bpf } for pid=2039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { bpf } for pid=2039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { perfmon } for pid=2039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { perfmon } for pid=2039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { perfmon } for pid=2039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { perfmon } for pid=2039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { perfmon } for pid=2039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { bpf } for pid=2039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { bpf } for pid=2039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit: BPF prog-id=101 op=LOAD Jul 14 21:58:20.353000 audit[2039]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2030 pid=2039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.353000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230316435636331646364653436666437623437333464306631393166 Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { bpf } for pid=2039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { bpf } for pid=2039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { perfmon } for pid=2039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { perfmon } for pid=2039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { perfmon } for pid=2039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { perfmon } for pid=2039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { perfmon } for pid=2039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { bpf } for pid=2039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { bpf } for pid=2039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit: BPF prog-id=102 op=LOAD Jul 14 21:58:20.353000 audit[2039]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2030 pid=2039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.353000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230316435636331646364653436666437623437333464306631393166 Jul 14 21:58:20.353000 audit: BPF prog-id=102 op=UNLOAD Jul 14 21:58:20.353000 audit: BPF prog-id=101 op=UNLOAD Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { bpf } for pid=2039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { bpf } for pid=2039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { bpf } for pid=2039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { perfmon } for pid=2039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { perfmon } for pid=2039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { perfmon } for pid=2039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { perfmon } for pid=2039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { perfmon } for pid=2039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { bpf } for pid=2039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit[2039]: AVC avc: denied { bpf } for pid=2039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.353000 audit: BPF prog-id=103 op=LOAD Jul 14 21:58:20.353000 audit[2039]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2030 pid=2039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.353000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230316435636331646364653436666437623437333464306631393166 Jul 14 21:58:20.364807 env[1213]: time="2025-07-14T21:58:20.364724090Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-thh5f,Uid:d3a935e2-f028-48f3-b72b-b2d09946ad75,Namespace:kube-system,Attempt:0,} returns sandbox id \"201d5cc1dcde46fd7b4734d0f191f7cd14c42105afc7a5fd7793700593775968\"" Jul 14 21:58:20.365537 kubelet[1982]: E0714 21:58:20.365514 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:20.369269 env[1213]: time="2025-07-14T21:58:20.369235296Z" level=info msg="CreateContainer within sandbox \"201d5cc1dcde46fd7b4734d0f191f7cd14c42105afc7a5fd7793700593775968\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 14 21:58:20.427302 env[1213]: time="2025-07-14T21:58:20.427200115Z" level=info msg="CreateContainer within sandbox \"201d5cc1dcde46fd7b4734d0f191f7cd14c42105afc7a5fd7793700593775968\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"a3a1ac8c237f603b7fa6293327507bb311ab8eb975970fc8f8f804b84666356c\"" Jul 14 21:58:20.429258 env[1213]: time="2025-07-14T21:58:20.429209331Z" level=info msg="StartContainer for \"a3a1ac8c237f603b7fa6293327507bb311ab8eb975970fc8f8f804b84666356c\"" Jul 14 21:58:20.446332 systemd[1]: Started cri-containerd-a3a1ac8c237f603b7fa6293327507bb311ab8eb975970fc8f8f804b84666356c.scope. Jul 14 21:58:20.468000 audit[2071]: AVC avc: denied { perfmon } for pid=2071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.468000 audit[2071]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2030 pid=2071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.468000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133613161633863323337663630336237666136323933333237353037 Jul 14 21:58:20.468000 audit[2071]: AVC avc: denied { bpf } for pid=2071 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.468000 audit[2071]: AVC avc: denied { bpf } for pid=2071 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.468000 audit[2071]: AVC avc: denied { bpf } for pid=2071 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.468000 audit[2071]: AVC avc: denied { perfmon } for pid=2071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.468000 audit[2071]: AVC avc: denied { perfmon } for pid=2071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.468000 audit[2071]: AVC avc: denied { perfmon } for pid=2071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.468000 audit[2071]: AVC avc: denied { perfmon } for pid=2071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.468000 audit[2071]: AVC avc: denied { perfmon } for pid=2071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.468000 audit[2071]: AVC avc: denied { bpf } for pid=2071 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.468000 audit[2071]: AVC avc: denied { bpf } for pid=2071 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.468000 audit: BPF prog-id=104 op=LOAD Jul 14 21:58:20.468000 audit[2071]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2030 pid=2071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.468000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133613161633863323337663630336237666136323933333237353037 Jul 14 21:58:20.469000 audit[2071]: AVC avc: denied { bpf } for pid=2071 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.469000 audit[2071]: AVC avc: denied { bpf } for pid=2071 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.469000 audit[2071]: AVC avc: denied { perfmon } for pid=2071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.469000 audit[2071]: AVC avc: denied { perfmon } for pid=2071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.469000 audit[2071]: AVC avc: denied { perfmon } for pid=2071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.469000 audit[2071]: AVC avc: denied { perfmon } for pid=2071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.469000 audit[2071]: AVC avc: denied { perfmon } for pid=2071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.469000 audit[2071]: AVC avc: denied { bpf } for pid=2071 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.469000 audit[2071]: AVC avc: denied { bpf } for pid=2071 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.469000 audit: BPF prog-id=105 op=LOAD Jul 14 21:58:20.469000 audit[2071]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2030 pid=2071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.469000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133613161633863323337663630336237666136323933333237353037 Jul 14 21:58:20.469000 audit: BPF prog-id=105 op=UNLOAD Jul 14 21:58:20.469000 audit: BPF prog-id=104 op=UNLOAD Jul 14 21:58:20.470000 audit[2071]: AVC avc: denied { bpf } for pid=2071 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.470000 audit[2071]: AVC avc: denied { bpf } for pid=2071 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.470000 audit[2071]: AVC avc: denied { bpf } for pid=2071 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.470000 audit[2071]: AVC avc: denied { perfmon } for pid=2071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.470000 audit[2071]: AVC avc: denied { perfmon } for pid=2071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.470000 audit[2071]: AVC avc: denied { perfmon } for pid=2071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.470000 audit[2071]: AVC avc: denied { perfmon } for pid=2071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.470000 audit[2071]: AVC avc: denied { perfmon } for pid=2071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.470000 audit[2071]: AVC avc: denied { bpf } for pid=2071 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.470000 audit[2071]: AVC avc: denied { bpf } for pid=2071 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:20.470000 audit: BPF prog-id=106 op=LOAD Jul 14 21:58:20.470000 audit[2071]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2030 pid=2071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.470000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133613161633863323337663630336237666136323933333237353037 Jul 14 21:58:20.483652 env[1213]: time="2025-07-14T21:58:20.483559370Z" level=info msg="StartContainer for \"a3a1ac8c237f603b7fa6293327507bb311ab8eb975970fc8f8f804b84666356c\" returns successfully" Jul 14 21:58:20.668000 audit[2134]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2134 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:20.668000 audit[2134]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcec2b1c0 a2=0 a3=1 items=0 ppid=2082 pid=2134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.668000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 14 21:58:20.669000 audit[2135]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2135 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 21:58:20.669000 audit[2135]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe93a4a70 a2=0 a3=1 items=0 ppid=2082 pid=2135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.669000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 14 21:58:20.669000 audit[2136]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2136 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:20.669000 audit[2136]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc31d8970 a2=0 a3=1 items=0 ppid=2082 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.669000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 14 21:58:20.670000 audit[2137]: NETFILTER_CFG table=nat:41 family=10 entries=1 op=nft_register_chain pid=2137 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 21:58:20.670000 audit[2137]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe7fee9c0 a2=0 a3=1 items=0 ppid=2082 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.670000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 14 21:58:20.671000 audit[2139]: NETFILTER_CFG table=filter:42 family=10 entries=1 op=nft_register_chain pid=2139 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 21:58:20.671000 audit[2139]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdea73a30 a2=0 a3=1 items=0 ppid=2082 pid=2139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.671000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 14 21:58:20.672000 audit[2138]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2138 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:20.672000 audit[2138]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd19bbb80 a2=0 a3=1 items=0 ppid=2082 pid=2138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.672000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 14 21:58:20.771000 audit[2140]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2140 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:20.771000 audit[2140]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffffd23e2d0 a2=0 a3=1 items=0 ppid=2082 pid=2140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.771000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 14 21:58:20.777000 audit[2142]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2142 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:20.777000 audit[2142]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc61bbaf0 a2=0 a3=1 items=0 ppid=2082 pid=2142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.777000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 14 21:58:20.783000 audit[2145]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2145 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:20.783000 audit[2145]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffff4487cc0 a2=0 a3=1 items=0 ppid=2082 pid=2145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.783000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 14 21:58:20.784000 audit[2146]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2146 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:20.784000 audit[2146]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcd6f9d80 a2=0 a3=1 items=0 ppid=2082 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.784000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 14 21:58:20.786000 audit[2148]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2148 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:20.786000 audit[2148]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe0c61820 a2=0 a3=1 items=0 ppid=2082 pid=2148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.786000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 14 21:58:20.788000 audit[2149]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2149 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:20.788000 audit[2149]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd29141e0 a2=0 a3=1 items=0 ppid=2082 pid=2149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.788000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 14 21:58:20.790000 audit[2151]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2151 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:20.790000 audit[2151]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff59480f0 a2=0 a3=1 items=0 ppid=2082 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.790000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 14 21:58:20.793000 audit[2154]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2154 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:20.793000 audit[2154]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffcaf447f0 a2=0 a3=1 items=0 ppid=2082 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.793000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 14 21:58:20.795000 audit[2155]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2155 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:20.795000 audit[2155]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffec388020 a2=0 a3=1 items=0 ppid=2082 pid=2155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.795000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 14 21:58:20.797000 audit[2157]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2157 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:20.797000 audit[2157]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdedf84d0 a2=0 a3=1 items=0 ppid=2082 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.797000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 14 21:58:20.798000 audit[2158]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2158 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:20.798000 audit[2158]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc63df340 a2=0 a3=1 items=0 ppid=2082 pid=2158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.798000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 14 21:58:20.800000 audit[2160]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2160 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:20.800000 audit[2160]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffed8a41d0 a2=0 a3=1 items=0 ppid=2082 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.800000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 14 21:58:20.804000 audit[2163]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2163 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:20.804000 audit[2163]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe6d3ce00 a2=0 a3=1 items=0 ppid=2082 pid=2163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.804000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 14 21:58:20.807000 audit[2166]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2166 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:20.807000 audit[2166]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd70eb2f0 a2=0 a3=1 items=0 ppid=2082 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.807000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 14 21:58:20.808000 audit[2167]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2167 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:20.808000 audit[2167]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe0578e90 a2=0 a3=1 items=0 ppid=2082 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.808000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 14 21:58:20.810000 audit[2169]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2169 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:20.810000 audit[2169]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=fffff21f7be0 a2=0 a3=1 items=0 ppid=2082 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.810000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 14 21:58:20.815000 audit[2172]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2172 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:20.815000 audit[2172]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff9a90200 a2=0 a3=1 items=0 ppid=2082 pid=2172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.815000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 14 21:58:20.816000 audit[2173]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:20.816000 audit[2173]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd7ac1e90 a2=0 a3=1 items=0 ppid=2082 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.816000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 14 21:58:20.818000 audit[2175]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2175 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 21:58:20.818000 audit[2175]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffd4473cd0 a2=0 a3=1 items=0 ppid=2082 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.818000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 14 21:58:20.838000 audit[2181]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2181 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:58:20.838000 audit[2181]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe9581c50 a2=0 a3=1 items=0 ppid=2082 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.838000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:58:20.853000 audit[2181]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2181 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:58:20.853000 audit[2181]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffe9581c50 a2=0 a3=1 items=0 ppid=2082 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.853000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:58:20.855000 audit[2186]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2186 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 21:58:20.855000 audit[2186]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffd69a90d0 a2=0 a3=1 items=0 ppid=2082 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.855000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 14 21:58:20.857000 audit[2188]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2188 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 21:58:20.857000 audit[2188]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffd4fe54e0 a2=0 a3=1 items=0 ppid=2082 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.857000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 14 21:58:20.861000 audit[2191]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2191 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 21:58:20.861000 audit[2191]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffde70c750 a2=0 a3=1 items=0 ppid=2082 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.861000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 14 21:58:20.862000 audit[2192]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2192 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 21:58:20.862000 audit[2192]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe45eb180 a2=0 a3=1 items=0 ppid=2082 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.862000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 14 21:58:20.864000 audit[2194]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2194 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 21:58:20.864000 audit[2194]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd967a1b0 a2=0 a3=1 items=0 ppid=2082 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.864000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 14 21:58:20.865000 audit[2195]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2195 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 21:58:20.865000 audit[2195]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe7e09770 a2=0 a3=1 items=0 ppid=2082 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.865000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 14 21:58:20.867000 audit[2197]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2197 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 21:58:20.867000 audit[2197]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff71accb0 a2=0 a3=1 items=0 ppid=2082 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.867000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 14 21:58:20.870000 audit[2200]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2200 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 21:58:20.870000 audit[2200]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffca96e720 a2=0 a3=1 items=0 ppid=2082 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.870000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 14 21:58:20.871000 audit[2201]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2201 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 21:58:20.871000 audit[2201]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc23197c0 a2=0 a3=1 items=0 ppid=2082 pid=2201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.871000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 14 21:58:20.873000 audit[2203]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2203 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 21:58:20.873000 audit[2203]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffef1343d0 a2=0 a3=1 items=0 ppid=2082 pid=2203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.873000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 14 21:58:20.874000 audit[2204]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2204 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 21:58:20.874000 audit[2204]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff110a370 a2=0 a3=1 items=0 ppid=2082 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.874000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 14 21:58:20.877000 audit[2206]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2206 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 21:58:20.877000 audit[2206]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffd7db6d0 a2=0 a3=1 items=0 ppid=2082 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.877000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 14 21:58:20.880000 audit[2209]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2209 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 21:58:20.880000 audit[2209]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdb4d9fb0 a2=0 a3=1 items=0 ppid=2082 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.880000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 14 21:58:20.883000 audit[2212]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2212 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 21:58:20.883000 audit[2212]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd21ba600 a2=0 a3=1 items=0 ppid=2082 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.883000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 14 21:58:20.884000 audit[2213]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2213 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 21:58:20.884000 audit[2213]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffcc6e89b0 a2=0 a3=1 items=0 ppid=2082 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.884000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 14 21:58:20.887000 audit[2215]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2215 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 21:58:20.887000 audit[2215]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffdc6bd0d0 a2=0 a3=1 items=0 ppid=2082 pid=2215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.887000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 14 21:58:20.890000 audit[2218]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2218 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 21:58:20.890000 audit[2218]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffc34c3710 a2=0 a3=1 items=0 ppid=2082 pid=2218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.890000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 14 21:58:20.891000 audit[2219]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2219 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 21:58:20.891000 audit[2219]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff1714710 a2=0 a3=1 items=0 ppid=2082 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.891000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 14 21:58:20.893000 audit[2221]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2221 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 21:58:20.893000 audit[2221]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffd488c1f0 a2=0 a3=1 items=0 ppid=2082 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.893000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 14 21:58:20.895000 audit[2222]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2222 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 21:58:20.895000 audit[2222]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffdfeba00 a2=0 a3=1 items=0 ppid=2082 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.895000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 14 21:58:20.897000 audit[2224]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2224 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 21:58:20.897000 audit[2224]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffedacc8f0 a2=0 a3=1 items=0 ppid=2082 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.897000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 14 21:58:20.900000 audit[2227]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2227 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 21:58:20.900000 audit[2227]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff6d04dc0 a2=0 a3=1 items=0 ppid=2082 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.900000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 14 21:58:20.903000 audit[2229]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2229 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 14 21:58:20.903000 audit[2229]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffe5752bc0 a2=0 a3=1 items=0 ppid=2082 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.903000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:58:20.903000 audit[2229]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2229 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 14 21:58:20.903000 audit[2229]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffe5752bc0 a2=0 a3=1 items=0 ppid=2082 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:20.903000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:58:21.171605 kubelet[1982]: E0714 21:58:21.171505 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:22.794466 kubelet[1982]: E0714 21:58:22.794435 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:22.810977 kubelet[1982]: I0714 21:58:22.810928 1982 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-thh5f" podStartSLOduration=4.810911437 podStartE2EDuration="4.810911437s" podCreationTimestamp="2025-07-14 21:58:18 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 21:58:21.186239329 +0000 UTC m=+8.122037912" watchObservedRunningTime="2025-07-14 21:58:22.810911437 +0000 UTC m=+9.746710020" Jul 14 21:58:23.175382 kubelet[1982]: E0714 21:58:23.175283 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:24.176927 kubelet[1982]: E0714 21:58:24.176884 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:24.306766 systemd[1]: Created slice kubepods-besteffort-pode9e50104_efea_4b2a_b096_0bd13c6fb6e6.slice. Jul 14 21:58:24.312889 kubelet[1982]: I0714 21:58:24.312823 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/e9e50104-efea-4b2a-b096-0bd13c6fb6e6-var-lib-calico\") pod \"tigera-operator-5bf8dfcb4-knfq8\" (UID: \"e9e50104-efea-4b2a-b096-0bd13c6fb6e6\") " pod="tigera-operator/tigera-operator-5bf8dfcb4-knfq8" Jul 14 21:58:24.312889 kubelet[1982]: I0714 21:58:24.312877 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ltsxn\" (UniqueName: \"kubernetes.io/projected/e9e50104-efea-4b2a-b096-0bd13c6fb6e6-kube-api-access-ltsxn\") pod \"tigera-operator-5bf8dfcb4-knfq8\" (UID: \"e9e50104-efea-4b2a-b096-0bd13c6fb6e6\") " pod="tigera-operator/tigera-operator-5bf8dfcb4-knfq8" Jul 14 21:58:24.610107 env[1213]: time="2025-07-14T21:58:24.610039499Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-5bf8dfcb4-knfq8,Uid:e9e50104-efea-4b2a-b096-0bd13c6fb6e6,Namespace:tigera-operator,Attempt:0,}" Jul 14 21:58:24.626179 env[1213]: time="2025-07-14T21:58:24.626102620Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 21:58:24.626179 env[1213]: time="2025-07-14T21:58:24.626144261Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 21:58:24.626179 env[1213]: time="2025-07-14T21:58:24.626155421Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 21:58:24.626369 env[1213]: time="2025-07-14T21:58:24.626297105Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b3574a8122e9d5e0aed55483da0e23e58da401b5d61ef52b4c9af58a4d58d1e3 pid=2247 runtime=io.containerd.runc.v2 Jul 14 21:58:24.637885 systemd[1]: Started cri-containerd-b3574a8122e9d5e0aed55483da0e23e58da401b5d61ef52b4c9af58a4d58d1e3.scope. Jul 14 21:58:24.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.667463 kernel: kauditd_printk_skb: 255 callbacks suppressed Jul 14 21:58:24.667510 kernel: audit: type=1400 audit(1752530304.665:862): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.672459 kernel: audit: type=1400 audit(1752530304.665:863): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.672500 kernel: audit: type=1400 audit(1752530304.665:864): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.674870 kernel: audit: type=1400 audit(1752530304.665:865): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.679872 kernel: audit: type=1400 audit(1752530304.665:866): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.679906 kernel: audit: type=1400 audit(1752530304.665:867): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.684696 kernel: audit: type=1400 audit(1752530304.665:868): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.687118 kernel: audit: type=1400 audit(1752530304.665:869): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.687170 kernel: audit: type=1400 audit(1752530304.665:870): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.691876 kernel: audit: type=1400 audit(1752530304.666:871): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.666000 audit: BPF prog-id=107 op=LOAD Jul 14 21:58:24.666000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.666000 audit[2255]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001a7b38 a2=10 a3=0 items=0 ppid=2247 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:24.666000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233353734613831323265396435653061656435353438336461306532 Jul 14 21:58:24.666000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.666000 audit[2255]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001a75a0 a2=3c a3=0 items=0 ppid=2247 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:24.666000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233353734613831323265396435653061656435353438336461306532 Jul 14 21:58:24.666000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.666000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.666000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.666000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.666000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.666000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.666000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.666000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.666000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.666000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.666000 audit: BPF prog-id=108 op=LOAD Jul 14 21:58:24.666000 audit[2255]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001a78e0 a2=78 a3=0 items=0 ppid=2247 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:24.666000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233353734613831323265396435653061656435353438336461306532 Jul 14 21:58:24.669000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.669000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.669000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.669000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.669000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.669000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.669000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.669000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.669000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.669000 audit: BPF prog-id=109 op=LOAD Jul 14 21:58:24.669000 audit[2255]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001a7670 a2=78 a3=0 items=0 ppid=2247 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:24.669000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233353734613831323265396435653061656435353438336461306532 Jul 14 21:58:24.671000 audit: BPF prog-id=109 op=UNLOAD Jul 14 21:58:24.671000 audit: BPF prog-id=108 op=UNLOAD Jul 14 21:58:24.671000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.671000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.671000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.671000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.671000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.671000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.671000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.671000 audit[2255]: AVC avc: denied { perfmon } for pid=2255 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.671000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.671000 audit[2255]: AVC avc: denied { bpf } for pid=2255 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:24.671000 audit: BPF prog-id=110 op=LOAD Jul 14 21:58:24.671000 audit[2255]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001a7b40 a2=78 a3=0 items=0 ppid=2247 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:24.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233353734613831323265396435653061656435353438336461306532 Jul 14 21:58:24.703505 env[1213]: time="2025-07-14T21:58:24.703449229Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-5bf8dfcb4-knfq8,Uid:e9e50104-efea-4b2a-b096-0bd13c6fb6e6,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"b3574a8122e9d5e0aed55483da0e23e58da401b5d61ef52b4c9af58a4d58d1e3\"" Jul 14 21:58:24.705239 env[1213]: time="2025-07-14T21:58:24.705208673Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 14 21:58:25.556685 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2629924523.mount: Deactivated successfully. Jul 14 21:58:26.281456 env[1213]: time="2025-07-14T21:58:26.281406926Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:26.282622 env[1213]: time="2025-07-14T21:58:26.282595074Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:26.283894 env[1213]: time="2025-07-14T21:58:26.283853584Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:26.285278 env[1213]: time="2025-07-14T21:58:26.285239577Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:26.285769 env[1213]: time="2025-07-14T21:58:26.285742469Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0\"" Jul 14 21:58:26.288079 env[1213]: time="2025-07-14T21:58:26.288049244Z" level=info msg="CreateContainer within sandbox \"b3574a8122e9d5e0aed55483da0e23e58da401b5d61ef52b4c9af58a4d58d1e3\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 14 21:58:26.298991 env[1213]: time="2025-07-14T21:58:26.298939902Z" level=info msg="CreateContainer within sandbox \"b3574a8122e9d5e0aed55483da0e23e58da401b5d61ef52b4c9af58a4d58d1e3\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"d114b85d86a7756f50667df08ee595099c6670f8f02dcf5938982b58f92b1cfc\"" Jul 14 21:58:26.300056 env[1213]: time="2025-07-14T21:58:26.300030848Z" level=info msg="StartContainer for \"d114b85d86a7756f50667df08ee595099c6670f8f02dcf5938982b58f92b1cfc\"" Jul 14 21:58:26.314315 systemd[1]: Started cri-containerd-d114b85d86a7756f50667df08ee595099c6670f8f02dcf5938982b58f92b1cfc.scope. Jul 14 21:58:26.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit: BPF prog-id=111 op=LOAD Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[2288]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2247 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:26.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431313462383564383661373735366635303636376466303865653539 Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[2288]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2247 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:26.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431313462383564383661373735366635303636376466303865653539 Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit: BPF prog-id=112 op=LOAD Jul 14 21:58:26.336000 audit[2288]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2247 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:26.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431313462383564383661373735366635303636376466303865653539 Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit: BPF prog-id=113 op=LOAD Jul 14 21:58:26.336000 audit[2288]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2247 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:26.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431313462383564383661373735366635303636376466303865653539 Jul 14 21:58:26.336000 audit: BPF prog-id=113 op=UNLOAD Jul 14 21:58:26.336000 audit: BPF prog-id=112 op=UNLOAD Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:26.336000 audit: BPF prog-id=114 op=LOAD Jul 14 21:58:26.336000 audit[2288]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2247 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:26.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431313462383564383661373735366635303636376466303865653539 Jul 14 21:58:26.357541 env[1213]: time="2025-07-14T21:58:26.357497610Z" level=info msg="StartContainer for \"d114b85d86a7756f50667df08ee595099c6670f8f02dcf5938982b58f92b1cfc\" returns successfully" Jul 14 21:58:26.419632 kubelet[1982]: E0714 21:58:26.419585 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:27.191213 kubelet[1982]: I0714 21:58:27.191156 1982 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-5bf8dfcb4-knfq8" podStartSLOduration=1.6090752419999999 podStartE2EDuration="3.191138674s" podCreationTimestamp="2025-07-14 21:58:24 +0000 UTC" firstStartedPulling="2025-07-14 21:58:24.70467546 +0000 UTC m=+11.640474043" lastFinishedPulling="2025-07-14 21:58:26.286738892 +0000 UTC m=+13.222537475" observedRunningTime="2025-07-14 21:58:27.190831907 +0000 UTC m=+14.126630490" watchObservedRunningTime="2025-07-14 21:58:27.191138674 +0000 UTC m=+14.126937257" Jul 14 21:58:31.544356 sudo[1351]: pam_unix(sudo:session): session closed for user root Jul 14 21:58:31.542000 audit[1351]: USER_END pid=1351 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 21:58:31.545500 kernel: kauditd_printk_skb: 104 callbacks suppressed Jul 14 21:58:31.545594 kernel: audit: type=1106 audit(1752530311.542:898): pid=1351 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 21:58:31.543000 audit[1351]: CRED_DISP pid=1351 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 21:58:31.551007 kernel: audit: type=1104 audit(1752530311.543:899): pid=1351 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 21:58:31.551542 sshd[1347]: pam_unix(sshd:session): session closed for user core Jul 14 21:58:31.550000 audit[1347]: USER_END pid=1347 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:58:31.554189 systemd[1]: sshd@6-10.0.0.76:22-10.0.0.1:35208.service: Deactivated successfully. Jul 14 21:58:31.554937 systemd[1]: session-7.scope: Deactivated successfully. Jul 14 21:58:31.555076 systemd[1]: session-7.scope: Consumed 6.782s CPU time. Jul 14 21:58:31.555770 kernel: audit: type=1106 audit(1752530311.550:900): pid=1347 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:58:31.555512 systemd-logind[1206]: Session 7 logged out. Waiting for processes to exit. Jul 14 21:58:31.556023 kernel: audit: type=1104 audit(1752530311.550:901): pid=1347 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:58:31.550000 audit[1347]: CRED_DISP pid=1347 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:58:31.556660 systemd-logind[1206]: Removed session 7. Jul 14 21:58:31.552000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.76:22-10.0.0.1:35208 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:58:31.561085 kernel: audit: type=1131 audit(1752530311.552:902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.76:22-10.0.0.1:35208 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:58:32.972000 audit[2370]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2370 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:58:32.972000 audit[2370]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=fffff4a8c0c0 a2=0 a3=1 items=0 ppid=2082 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:32.978336 kernel: audit: type=1325 audit(1752530312.972:903): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2370 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:58:32.978419 kernel: audit: type=1300 audit(1752530312.972:903): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=fffff4a8c0c0 a2=0 a3=1 items=0 ppid=2082 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:32.978451 kernel: audit: type=1327 audit(1752530312.972:903): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:58:32.972000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:58:32.981000 audit[2370]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2370 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:58:32.984884 kernel: audit: type=1325 audit(1752530312.981:904): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2370 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:58:32.981000 audit[2370]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff4a8c0c0 a2=0 a3=1 items=0 ppid=2082 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:32.981000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:58:32.988881 kernel: audit: type=1300 audit(1752530312.981:904): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff4a8c0c0 a2=0 a3=1 items=0 ppid=2082 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:33.025000 audit[2372]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2372 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:58:33.025000 audit[2372]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffde12ba30 a2=0 a3=1 items=0 ppid=2082 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:33.025000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:58:33.030000 audit[2372]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2372 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:58:33.030000 audit[2372]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffde12ba30 a2=0 a3=1 items=0 ppid=2082 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:33.030000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:58:36.267000 audit[2375]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2375 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:58:36.267000 audit[2375]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffd5ce7410 a2=0 a3=1 items=0 ppid=2082 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:36.267000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:58:36.279000 audit[2375]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2375 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:58:36.279000 audit[2375]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd5ce7410 a2=0 a3=1 items=0 ppid=2082 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:36.279000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:58:36.300088 systemd[1]: Created slice kubepods-besteffort-podbbec8064_7c1a_4b65_96d6_87f3200ed45f.slice. Jul 14 21:58:36.309000 audit[2378]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=2378 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:58:36.309000 audit[2378]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc7f5ccf0 a2=0 a3=1 items=0 ppid=2082 pid=2378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:36.309000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:58:36.313000 audit[2378]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2378 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:58:36.313000 audit[2378]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc7f5ccf0 a2=0 a3=1 items=0 ppid=2082 pid=2378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:36.313000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:58:36.405935 kubelet[1982]: I0714 21:58:36.405888 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/bbec8064-7c1a-4b65-96d6-87f3200ed45f-tigera-ca-bundle\") pod \"calico-typha-5966b485b-xctpk\" (UID: \"bbec8064-7c1a-4b65-96d6-87f3200ed45f\") " pod="calico-system/calico-typha-5966b485b-xctpk" Jul 14 21:58:36.405935 kubelet[1982]: I0714 21:58:36.405936 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/bbec8064-7c1a-4b65-96d6-87f3200ed45f-typha-certs\") pod \"calico-typha-5966b485b-xctpk\" (UID: \"bbec8064-7c1a-4b65-96d6-87f3200ed45f\") " pod="calico-system/calico-typha-5966b485b-xctpk" Jul 14 21:58:36.406270 kubelet[1982]: I0714 21:58:36.405960 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nswm4\" (UniqueName: \"kubernetes.io/projected/bbec8064-7c1a-4b65-96d6-87f3200ed45f-kube-api-access-nswm4\") pod \"calico-typha-5966b485b-xctpk\" (UID: \"bbec8064-7c1a-4b65-96d6-87f3200ed45f\") " pod="calico-system/calico-typha-5966b485b-xctpk" Jul 14 21:58:36.603805 kubelet[1982]: E0714 21:58:36.603697 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:36.604584 env[1213]: time="2025-07-14T21:58:36.604116709Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-5966b485b-xctpk,Uid:bbec8064-7c1a-4b65-96d6-87f3200ed45f,Namespace:calico-system,Attempt:0,}" Jul 14 21:58:36.619539 env[1213]: time="2025-07-14T21:58:36.619369846Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 21:58:36.619539 env[1213]: time="2025-07-14T21:58:36.619406567Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 21:58:36.619539 env[1213]: time="2025-07-14T21:58:36.619422927Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 21:58:36.619877 env[1213]: time="2025-07-14T21:58:36.619786694Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/802b15e0fdae607a689a9f743c99b502d6f0d60dfaff9ec469129e65d24b5eaf pid=2389 runtime=io.containerd.runc.v2 Jul 14 21:58:36.641615 systemd[1]: Started cri-containerd-802b15e0fdae607a689a9f743c99b502d6f0d60dfaff9ec469129e65d24b5eaf.scope. Jul 14 21:58:36.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.685953 kernel: kauditd_printk_skb: 19 callbacks suppressed Jul 14 21:58:36.686047 kernel: audit: type=1400 audit(1752530316.682:911): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.686074 kernel: audit: type=1400 audit(1752530316.682:912): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.688405 kernel: audit: type=1400 audit(1752530316.682:913): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.693299 kernel: audit: type=1400 audit(1752530316.682:914): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.695341 systemd[1]: Created slice kubepods-besteffort-podc9832acf_2925_409a_94be_3e3ae3208c16.slice. Jul 14 21:58:36.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.700515 kernel: audit: type=1400 audit(1752530316.682:915): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.703196 kernel: audit: type=1400 audit(1752530316.682:916): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.706491 kernel: audit: type=1400 audit(1752530316.682:917): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.708188 kubelet[1982]: I0714 21:58:36.708145 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/c9832acf-2925-409a-94be-3e3ae3208c16-flexvol-driver-host\") pod \"calico-node-wkkg5\" (UID: \"c9832acf-2925-409a-94be-3e3ae3208c16\") " pod="calico-system/calico-node-wkkg5" Jul 14 21:58:36.708319 kubelet[1982]: I0714 21:58:36.708199 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c9832acf-2925-409a-94be-3e3ae3208c16-tigera-ca-bundle\") pod \"calico-node-wkkg5\" (UID: \"c9832acf-2925-409a-94be-3e3ae3208c16\") " pod="calico-system/calico-node-wkkg5" Jul 14 21:58:36.708319 kubelet[1982]: I0714 21:58:36.708230 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bttl4\" (UniqueName: \"kubernetes.io/projected/c9832acf-2925-409a-94be-3e3ae3208c16-kube-api-access-bttl4\") pod \"calico-node-wkkg5\" (UID: \"c9832acf-2925-409a-94be-3e3ae3208c16\") " pod="calico-system/calico-node-wkkg5" Jul 14 21:58:36.708319 kubelet[1982]: I0714 21:58:36.708254 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/c9832acf-2925-409a-94be-3e3ae3208c16-policysync\") pod \"calico-node-wkkg5\" (UID: \"c9832acf-2925-409a-94be-3e3ae3208c16\") " pod="calico-system/calico-node-wkkg5" Jul 14 21:58:36.708319 kubelet[1982]: I0714 21:58:36.708275 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/c9832acf-2925-409a-94be-3e3ae3208c16-var-lib-calico\") pod \"calico-node-wkkg5\" (UID: \"c9832acf-2925-409a-94be-3e3ae3208c16\") " pod="calico-system/calico-node-wkkg5" Jul 14 21:58:36.708319 kubelet[1982]: I0714 21:58:36.708292 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/c9832acf-2925-409a-94be-3e3ae3208c16-cni-log-dir\") pod \"calico-node-wkkg5\" (UID: \"c9832acf-2925-409a-94be-3e3ae3208c16\") " pod="calico-system/calico-node-wkkg5" Jul 14 21:58:36.708462 kubelet[1982]: I0714 21:58:36.708311 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/c9832acf-2925-409a-94be-3e3ae3208c16-cni-bin-dir\") pod \"calico-node-wkkg5\" (UID: \"c9832acf-2925-409a-94be-3e3ae3208c16\") " pod="calico-system/calico-node-wkkg5" Jul 14 21:58:36.708462 kubelet[1982]: I0714 21:58:36.708331 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/c9832acf-2925-409a-94be-3e3ae3208c16-cni-net-dir\") pod \"calico-node-wkkg5\" (UID: \"c9832acf-2925-409a-94be-3e3ae3208c16\") " pod="calico-system/calico-node-wkkg5" Jul 14 21:58:36.708462 kubelet[1982]: I0714 21:58:36.708352 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c9832acf-2925-409a-94be-3e3ae3208c16-xtables-lock\") pod \"calico-node-wkkg5\" (UID: \"c9832acf-2925-409a-94be-3e3ae3208c16\") " pod="calico-system/calico-node-wkkg5" Jul 14 21:58:36.708462 kubelet[1982]: I0714 21:58:36.708369 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c9832acf-2925-409a-94be-3e3ae3208c16-lib-modules\") pod \"calico-node-wkkg5\" (UID: \"c9832acf-2925-409a-94be-3e3ae3208c16\") " pod="calico-system/calico-node-wkkg5" Jul 14 21:58:36.708462 kubelet[1982]: I0714 21:58:36.708390 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/c9832acf-2925-409a-94be-3e3ae3208c16-node-certs\") pod \"calico-node-wkkg5\" (UID: \"c9832acf-2925-409a-94be-3e3ae3208c16\") " pod="calico-system/calico-node-wkkg5" Jul 14 21:58:36.708576 kubelet[1982]: I0714 21:58:36.708408 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/c9832acf-2925-409a-94be-3e3ae3208c16-var-run-calico\") pod \"calico-node-wkkg5\" (UID: \"c9832acf-2925-409a-94be-3e3ae3208c16\") " pod="calico-system/calico-node-wkkg5" Jul 14 21:58:36.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.711897 kernel: audit: type=1400 audit(1752530316.682:918): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.714393 kernel: audit: type=1400 audit(1752530316.682:919): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.717523 kernel: audit: type=1400 audit(1752530316.682:920): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.682000 audit: BPF prog-id=115 op=LOAD Jul 14 21:58:36.683000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.683000 audit[2398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2389 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:36.683000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830326231356530666461653630376136383961396637343363393962 Jul 14 21:58:36.683000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.683000 audit[2398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2389 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:36.683000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830326231356530666461653630376136383961396637343363393962 Jul 14 21:58:36.683000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.683000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.683000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.683000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.683000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.683000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.683000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.683000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.683000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.683000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.683000 audit: BPF prog-id=116 op=LOAD Jul 14 21:58:36.683000 audit[2398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2389 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:36.683000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830326231356530666461653630376136383961396637343363393962 Jul 14 21:58:36.685000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.685000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.685000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.685000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.685000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.685000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.685000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.685000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.685000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.685000 audit: BPF prog-id=117 op=LOAD Jul 14 21:58:36.685000 audit[2398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2389 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:36.685000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830326231356530666461653630376136383961396637343363393962 Jul 14 21:58:36.687000 audit: BPF prog-id=117 op=UNLOAD Jul 14 21:58:36.687000 audit: BPF prog-id=116 op=UNLOAD Jul 14 21:58:36.688000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.688000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.688000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.688000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.688000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.688000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.688000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.688000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.688000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.688000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:36.688000 audit: BPF prog-id=118 op=LOAD Jul 14 21:58:36.688000 audit[2398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2389 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:36.688000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830326231356530666461653630376136383961396637343363393962 Jul 14 21:58:36.730725 env[1213]: time="2025-07-14T21:58:36.730659452Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-5966b485b-xctpk,Uid:bbec8064-7c1a-4b65-96d6-87f3200ed45f,Namespace:calico-system,Attempt:0,} returns sandbox id \"802b15e0fdae607a689a9f743c99b502d6f0d60dfaff9ec469129e65d24b5eaf\"" Jul 14 21:58:36.731772 kubelet[1982]: E0714 21:58:36.731740 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:36.732628 env[1213]: time="2025-07-14T21:58:36.732588529Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 14 21:58:36.811162 kubelet[1982]: E0714 21:58:36.811131 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:36.811162 kubelet[1982]: W0714 21:58:36.811154 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:36.811342 kubelet[1982]: E0714 21:58:36.811177 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:36.811398 kubelet[1982]: E0714 21:58:36.811380 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:36.811398 kubelet[1982]: W0714 21:58:36.811394 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:36.811464 kubelet[1982]: E0714 21:58:36.811405 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:36.811585 kubelet[1982]: E0714 21:58:36.811571 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:36.811585 kubelet[1982]: W0714 21:58:36.811583 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:36.811652 kubelet[1982]: E0714 21:58:36.811593 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:36.812151 kubelet[1982]: E0714 21:58:36.812125 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:36.812151 kubelet[1982]: W0714 21:58:36.812140 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:36.812250 kubelet[1982]: E0714 21:58:36.812171 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:36.812371 kubelet[1982]: E0714 21:58:36.812351 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:36.812371 kubelet[1982]: W0714 21:58:36.812363 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:36.812441 kubelet[1982]: E0714 21:58:36.812385 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:36.812552 kubelet[1982]: E0714 21:58:36.812531 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:36.812552 kubelet[1982]: W0714 21:58:36.812542 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:36.812552 kubelet[1982]: E0714 21:58:36.812553 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:36.812779 kubelet[1982]: E0714 21:58:36.812761 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:36.812779 kubelet[1982]: W0714 21:58:36.812776 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:36.812890 kubelet[1982]: E0714 21:58:36.812792 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:36.815262 kubelet[1982]: E0714 21:58:36.815239 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:36.815262 kubelet[1982]: W0714 21:58:36.815257 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:36.815414 kubelet[1982]: E0714 21:58:36.815392 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:36.815469 kubelet[1982]: E0714 21:58:36.815432 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:36.815535 kubelet[1982]: W0714 21:58:36.815522 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:36.815655 kubelet[1982]: E0714 21:58:36.815633 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:36.815978 kubelet[1982]: E0714 21:58:36.815956 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:36.816057 kubelet[1982]: W0714 21:58:36.816043 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:36.816180 kubelet[1982]: E0714 21:58:36.816152 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:36.816291 kubelet[1982]: E0714 21:58:36.816279 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:36.816370 kubelet[1982]: W0714 21:58:36.816355 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:36.816472 kubelet[1982]: E0714 21:58:36.816453 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:36.816765 kubelet[1982]: E0714 21:58:36.816747 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:36.816855 kubelet[1982]: W0714 21:58:36.816841 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:36.816966 kubelet[1982]: E0714 21:58:36.816952 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:36.825159 kubelet[1982]: E0714 21:58:36.825113 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:36.825159 kubelet[1982]: W0714 21:58:36.825144 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:36.825159 kubelet[1982]: E0714 21:58:36.825173 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:36.832601 kubelet[1982]: E0714 21:58:36.832558 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:36.832601 kubelet[1982]: W0714 21:58:36.832599 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:36.832817 kubelet[1982]: E0714 21:58:36.832797 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:36.832817 kubelet[1982]: W0714 21:58:36.832813 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:36.832902 kubelet[1982]: E0714 21:58:36.832845 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:36.832960 kubelet[1982]: E0714 21:58:36.832940 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:36.835419 kubelet[1982]: E0714 21:58:36.835378 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:36.835419 kubelet[1982]: W0714 21:58:36.835405 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:36.835531 kubelet[1982]: E0714 21:58:36.835447 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:36.835621 kubelet[1982]: E0714 21:58:36.835602 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:36.835621 kubelet[1982]: W0714 21:58:36.835614 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:36.835743 kubelet[1982]: E0714 21:58:36.835722 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:36.836019 kubelet[1982]: E0714 21:58:36.835994 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:36.836019 kubelet[1982]: W0714 21:58:36.836015 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:36.836207 kubelet[1982]: E0714 21:58:36.836184 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:36.836207 kubelet[1982]: W0714 21:58:36.836200 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:36.836972 kubelet[1982]: E0714 21:58:36.836944 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:36.837044 kubelet[1982]: E0714 21:58:36.836989 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:36.842024 kubelet[1982]: E0714 21:58:36.841988 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:36.842024 kubelet[1982]: W0714 21:58:36.842013 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:36.842163 kubelet[1982]: E0714 21:58:36.842039 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:36.852015 kubelet[1982]: E0714 21:58:36.851969 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:36.852015 kubelet[1982]: W0714 21:58:36.851998 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:36.852303 kubelet[1982]: E0714 21:58:36.852288 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:36.852303 kubelet[1982]: W0714 21:58:36.852300 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:36.854810 kubelet[1982]: E0714 21:58:36.854713 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:36.854810 kubelet[1982]: E0714 21:58:36.854766 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:36.855045 kubelet[1982]: E0714 21:58:36.855018 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:36.855045 kubelet[1982]: W0714 21:58:36.855035 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:36.855132 kubelet[1982]: E0714 21:58:36.855054 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:36.856663 kubelet[1982]: E0714 21:58:36.856639 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:36.856663 kubelet[1982]: W0714 21:58:36.856659 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:36.856766 kubelet[1982]: E0714 21:58:36.856679 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:36.975336 kubelet[1982]: E0714 21:58:36.975293 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-jtcvj" podUID="3c931f77-c334-4b3e-a241-dda45696bef8" Jul 14 21:58:36.997499 kubelet[1982]: E0714 21:58:36.997470 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:36.997683 kubelet[1982]: W0714 21:58:36.997633 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:36.997807 kubelet[1982]: E0714 21:58:36.997790 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:36.998152 kubelet[1982]: E0714 21:58:36.998098 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:36.998245 kubelet[1982]: W0714 21:58:36.998229 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:36.999081 kubelet[1982]: E0714 21:58:36.998822 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:36.999081 kubelet[1982]: E0714 21:58:36.999060 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:36.999081 kubelet[1982]: W0714 21:58:36.999073 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:36.999081 kubelet[1982]: E0714 21:58:36.999083 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:36.999427 kubelet[1982]: E0714 21:58:36.999250 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:36.999427 kubelet[1982]: W0714 21:58:36.999263 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:36.999427 kubelet[1982]: E0714 21:58:36.999275 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:36.999891 kubelet[1982]: E0714 21:58:36.999853 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:36.999891 kubelet[1982]: W0714 21:58:36.999890 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:36.999971 kubelet[1982]: E0714 21:58:36.999903 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.000084 kubelet[1982]: E0714 21:58:37.000071 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.000084 kubelet[1982]: W0714 21:58:37.000083 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.000145 kubelet[1982]: E0714 21:58:37.000093 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.000262 kubelet[1982]: E0714 21:58:37.000239 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.000262 kubelet[1982]: W0714 21:58:37.000258 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.000315 kubelet[1982]: E0714 21:58:37.000267 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.000428 kubelet[1982]: E0714 21:58:37.000408 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.000428 kubelet[1982]: W0714 21:58:37.000426 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.000482 kubelet[1982]: E0714 21:58:37.000436 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.000604 kubelet[1982]: E0714 21:58:37.000586 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.000637 kubelet[1982]: W0714 21:58:37.000604 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.000637 kubelet[1982]: E0714 21:58:37.000613 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.000793 kubelet[1982]: E0714 21:58:37.000780 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.000830 kubelet[1982]: W0714 21:58:37.000793 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.000830 kubelet[1982]: E0714 21:58:37.000804 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.001010 kubelet[1982]: E0714 21:58:37.000997 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.001010 kubelet[1982]: W0714 21:58:37.001010 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.001080 kubelet[1982]: E0714 21:58:37.001020 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.002597 kubelet[1982]: E0714 21:58:37.002580 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.002632 kubelet[1982]: W0714 21:58:37.002597 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.002632 kubelet[1982]: E0714 21:58:37.002612 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.002873 kubelet[1982]: E0714 21:58:37.002843 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.002873 kubelet[1982]: W0714 21:58:37.002855 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.002963 kubelet[1982]: E0714 21:58:37.002882 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.003077 kubelet[1982]: E0714 21:58:37.003063 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.003129 kubelet[1982]: W0714 21:58:37.003076 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.003129 kubelet[1982]: E0714 21:58:37.003085 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.003977 kubelet[1982]: E0714 21:58:37.003959 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.004046 kubelet[1982]: W0714 21:58:37.004034 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.004108 kubelet[1982]: E0714 21:58:37.004096 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.004351 kubelet[1982]: E0714 21:58:37.004336 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.004439 kubelet[1982]: W0714 21:58:37.004425 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.004500 kubelet[1982]: E0714 21:58:37.004488 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.004761 kubelet[1982]: E0714 21:58:37.004745 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.004843 kubelet[1982]: W0714 21:58:37.004830 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.004920 kubelet[1982]: E0714 21:58:37.004907 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.005175 kubelet[1982]: E0714 21:58:37.005159 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.005308 kubelet[1982]: W0714 21:58:37.005281 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.005390 kubelet[1982]: E0714 21:58:37.005377 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.005638 kubelet[1982]: E0714 21:58:37.005623 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.005719 kubelet[1982]: W0714 21:58:37.005704 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.005778 kubelet[1982]: E0714 21:58:37.005766 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.006082 kubelet[1982]: E0714 21:58:37.006068 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.006159 kubelet[1982]: W0714 21:58:37.006146 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.006262 kubelet[1982]: E0714 21:58:37.006247 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.006888 env[1213]: time="2025-07-14T21:58:37.006828664Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-wkkg5,Uid:c9832acf-2925-409a-94be-3e3ae3208c16,Namespace:calico-system,Attempt:0,}" Jul 14 21:58:37.014231 kubelet[1982]: E0714 21:58:37.014203 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.014231 kubelet[1982]: W0714 21:58:37.014222 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.014325 kubelet[1982]: E0714 21:58:37.014235 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.014325 kubelet[1982]: I0714 21:58:37.014259 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tt25g\" (UniqueName: \"kubernetes.io/projected/3c931f77-c334-4b3e-a241-dda45696bef8-kube-api-access-tt25g\") pod \"csi-node-driver-jtcvj\" (UID: \"3c931f77-c334-4b3e-a241-dda45696bef8\") " pod="calico-system/csi-node-driver-jtcvj" Jul 14 21:58:37.014492 kubelet[1982]: E0714 21:58:37.014463 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.014492 kubelet[1982]: W0714 21:58:37.014480 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.014492 kubelet[1982]: E0714 21:58:37.014493 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.014575 kubelet[1982]: I0714 21:58:37.014506 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/3c931f77-c334-4b3e-a241-dda45696bef8-registration-dir\") pod \"csi-node-driver-jtcvj\" (UID: \"3c931f77-c334-4b3e-a241-dda45696bef8\") " pod="calico-system/csi-node-driver-jtcvj" Jul 14 21:58:37.014766 kubelet[1982]: E0714 21:58:37.014734 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.014766 kubelet[1982]: W0714 21:58:37.014752 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.014766 kubelet[1982]: E0714 21:58:37.014766 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.014852 kubelet[1982]: I0714 21:58:37.014782 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/3c931f77-c334-4b3e-a241-dda45696bef8-kubelet-dir\") pod \"csi-node-driver-jtcvj\" (UID: \"3c931f77-c334-4b3e-a241-dda45696bef8\") " pod="calico-system/csi-node-driver-jtcvj" Jul 14 21:58:37.015012 kubelet[1982]: E0714 21:58:37.014983 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.015012 kubelet[1982]: W0714 21:58:37.015000 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.015012 kubelet[1982]: E0714 21:58:37.015013 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.015091 kubelet[1982]: I0714 21:58:37.015030 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/3c931f77-c334-4b3e-a241-dda45696bef8-varrun\") pod \"csi-node-driver-jtcvj\" (UID: \"3c931f77-c334-4b3e-a241-dda45696bef8\") " pod="calico-system/csi-node-driver-jtcvj" Jul 14 21:58:37.017376 kubelet[1982]: E0714 21:58:37.017312 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.017376 kubelet[1982]: W0714 21:58:37.017346 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.017376 kubelet[1982]: E0714 21:58:37.017366 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.017616 kubelet[1982]: I0714 21:58:37.017383 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/3c931f77-c334-4b3e-a241-dda45696bef8-socket-dir\") pod \"csi-node-driver-jtcvj\" (UID: \"3c931f77-c334-4b3e-a241-dda45696bef8\") " pod="calico-system/csi-node-driver-jtcvj" Jul 14 21:58:37.017886 kubelet[1982]: E0714 21:58:37.017718 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.017886 kubelet[1982]: W0714 21:58:37.017734 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.017886 kubelet[1982]: E0714 21:58:37.017750 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.017991 kubelet[1982]: E0714 21:58:37.017914 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.017991 kubelet[1982]: W0714 21:58:37.017923 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.018039 kubelet[1982]: E0714 21:58:37.018013 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.018100 kubelet[1982]: E0714 21:58:37.018088 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.018100 kubelet[1982]: W0714 21:58:37.018096 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.018444 kubelet[1982]: E0714 21:58:37.018184 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.018444 kubelet[1982]: E0714 21:58:37.018379 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.018444 kubelet[1982]: W0714 21:58:37.018388 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.018553 kubelet[1982]: E0714 21:58:37.018475 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.018553 kubelet[1982]: E0714 21:58:37.018545 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.018553 kubelet[1982]: W0714 21:58:37.018553 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.019218 kubelet[1982]: E0714 21:58:37.018641 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.019218 kubelet[1982]: E0714 21:58:37.018782 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.019218 kubelet[1982]: W0714 21:58:37.018791 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.019218 kubelet[1982]: E0714 21:58:37.018800 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.019218 kubelet[1982]: E0714 21:58:37.018995 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.019218 kubelet[1982]: W0714 21:58:37.019005 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.019218 kubelet[1982]: E0714 21:58:37.019021 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.020198 kubelet[1982]: E0714 21:58:37.020178 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.020198 kubelet[1982]: W0714 21:58:37.020200 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.020300 kubelet[1982]: E0714 21:58:37.020214 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.020527 kubelet[1982]: E0714 21:58:37.020484 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.020527 kubelet[1982]: W0714 21:58:37.020526 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.020590 kubelet[1982]: E0714 21:58:37.020537 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.020780 kubelet[1982]: E0714 21:58:37.020763 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.020911 kubelet[1982]: W0714 21:58:37.020781 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.020911 kubelet[1982]: E0714 21:58:37.020792 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.022578 env[1213]: time="2025-07-14T21:58:37.021652748Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 21:58:37.022578 env[1213]: time="2025-07-14T21:58:37.021705669Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 21:58:37.022578 env[1213]: time="2025-07-14T21:58:37.021715629Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 21:58:37.022578 env[1213]: time="2025-07-14T21:58:37.021852672Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1cbbfe6f73704ec4e4b2a1ea0ddfe3e63f630117a1870b9ae2cfd69fa4770497 pid=2485 runtime=io.containerd.runc.v2 Jul 14 21:58:37.037063 systemd[1]: Started cri-containerd-1cbbfe6f73704ec4e4b2a1ea0ddfe3e63f630117a1870b9ae2cfd69fa4770497.scope. Jul 14 21:58:37.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.055000 audit: BPF prog-id=119 op=LOAD Jul 14 21:58:37.055000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.055000 audit[2501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2485 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:37.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163626266653666373337303465633465346232613165613064646665 Jul 14 21:58:37.055000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.055000 audit[2501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2485 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:37.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163626266653666373337303465633465346232613165613064646665 Jul 14 21:58:37.056000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.056000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.056000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.056000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.056000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.056000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.056000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.056000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.056000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.056000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.056000 audit: BPF prog-id=120 op=LOAD Jul 14 21:58:37.056000 audit[2501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2485 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:37.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163626266653666373337303465633465346232613165613064646665 Jul 14 21:58:37.057000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.057000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.057000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.057000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.057000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.057000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.057000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.057000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.057000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.057000 audit: BPF prog-id=121 op=LOAD Jul 14 21:58:37.057000 audit[2501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2485 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:37.057000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163626266653666373337303465633465346232613165613064646665 Jul 14 21:58:37.058000 audit: BPF prog-id=121 op=UNLOAD Jul 14 21:58:37.058000 audit: BPF prog-id=120 op=UNLOAD Jul 14 21:58:37.058000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.058000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.058000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.058000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.058000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.058000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.058000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.058000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.058000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.058000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:37.058000 audit: BPF prog-id=122 op=LOAD Jul 14 21:58:37.058000 audit[2501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2485 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:37.058000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163626266653666373337303465633465346232613165613064646665 Jul 14 21:58:37.070581 env[1213]: time="2025-07-14T21:58:37.070520125Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-wkkg5,Uid:c9832acf-2925-409a-94be-3e3ae3208c16,Namespace:calico-system,Attempt:0,} returns sandbox id \"1cbbfe6f73704ec4e4b2a1ea0ddfe3e63f630117a1870b9ae2cfd69fa4770497\"" Jul 14 21:58:37.117930 kubelet[1982]: E0714 21:58:37.117827 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.117930 kubelet[1982]: W0714 21:58:37.117849 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.117930 kubelet[1982]: E0714 21:58:37.117881 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.119354 kubelet[1982]: E0714 21:58:37.119311 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.120039 kubelet[1982]: W0714 21:58:37.119355 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.120039 kubelet[1982]: E0714 21:58:37.119376 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.120039 kubelet[1982]: E0714 21:58:37.119833 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.120039 kubelet[1982]: W0714 21:58:37.119847 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.120039 kubelet[1982]: E0714 21:58:37.119873 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.120332 kubelet[1982]: E0714 21:58:37.120229 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.120332 kubelet[1982]: W0714 21:58:37.120243 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.120332 kubelet[1982]: E0714 21:58:37.120259 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.120660 kubelet[1982]: E0714 21:58:37.120499 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.120660 kubelet[1982]: W0714 21:58:37.120511 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.120660 kubelet[1982]: E0714 21:58:37.120524 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.121025 kubelet[1982]: E0714 21:58:37.120921 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.121025 kubelet[1982]: W0714 21:58:37.120940 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.121025 kubelet[1982]: E0714 21:58:37.120995 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.121291 kubelet[1982]: E0714 21:58:37.121190 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.121291 kubelet[1982]: W0714 21:58:37.121202 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.121291 kubelet[1982]: E0714 21:58:37.121228 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.121566 kubelet[1982]: E0714 21:58:37.121452 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.121566 kubelet[1982]: W0714 21:58:37.121463 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.121566 kubelet[1982]: E0714 21:58:37.121482 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.121867 kubelet[1982]: E0714 21:58:37.121727 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.121867 kubelet[1982]: W0714 21:58:37.121738 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.121867 kubelet[1982]: E0714 21:58:37.121756 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.122183 kubelet[1982]: E0714 21:58:37.122037 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.122183 kubelet[1982]: W0714 21:58:37.122051 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.122183 kubelet[1982]: E0714 21:58:37.122064 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.122486 kubelet[1982]: E0714 21:58:37.122361 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.122486 kubelet[1982]: W0714 21:58:37.122375 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.122486 kubelet[1982]: E0714 21:58:37.122391 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.122801 kubelet[1982]: E0714 21:58:37.122653 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.122801 kubelet[1982]: W0714 21:58:37.122666 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.122801 kubelet[1982]: E0714 21:58:37.122691 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.123147 kubelet[1982]: E0714 21:58:37.123045 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.123147 kubelet[1982]: W0714 21:58:37.123060 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.123147 kubelet[1982]: E0714 21:58:37.123124 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.123411 kubelet[1982]: E0714 21:58:37.123313 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.123411 kubelet[1982]: W0714 21:58:37.123325 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.123411 kubelet[1982]: E0714 21:58:37.123362 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.123689 kubelet[1982]: E0714 21:58:37.123569 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.123689 kubelet[1982]: W0714 21:58:37.123580 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.123689 kubelet[1982]: E0714 21:58:37.123600 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.123997 kubelet[1982]: E0714 21:58:37.123849 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.123997 kubelet[1982]: W0714 21:58:37.123893 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.123997 kubelet[1982]: E0714 21:58:37.123913 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.124408 kubelet[1982]: E0714 21:58:37.124173 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.124408 kubelet[1982]: W0714 21:58:37.124187 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.124408 kubelet[1982]: E0714 21:58:37.124200 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.124698 kubelet[1982]: E0714 21:58:37.124590 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.124698 kubelet[1982]: W0714 21:58:37.124604 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.124698 kubelet[1982]: E0714 21:58:37.124657 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.124971 kubelet[1982]: E0714 21:58:37.124871 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.124971 kubelet[1982]: W0714 21:58:37.124886 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.124971 kubelet[1982]: E0714 21:58:37.124933 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.125249 kubelet[1982]: E0714 21:58:37.125148 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.125249 kubelet[1982]: W0714 21:58:37.125160 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.125249 kubelet[1982]: E0714 21:58:37.125174 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.125424 kubelet[1982]: E0714 21:58:37.125410 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.125493 kubelet[1982]: W0714 21:58:37.125480 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.125559 kubelet[1982]: E0714 21:58:37.125547 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.125784 kubelet[1982]: E0714 21:58:37.125770 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.125883 kubelet[1982]: W0714 21:58:37.125845 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.125972 kubelet[1982]: E0714 21:58:37.125954 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.126187 kubelet[1982]: E0714 21:58:37.126172 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.126266 kubelet[1982]: W0714 21:58:37.126252 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.126339 kubelet[1982]: E0714 21:58:37.126327 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.126572 kubelet[1982]: E0714 21:58:37.126557 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.126648 kubelet[1982]: W0714 21:58:37.126634 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.126731 kubelet[1982]: E0714 21:58:37.126718 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.127335 kubelet[1982]: E0714 21:58:37.127306 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.127437 kubelet[1982]: W0714 21:58:37.127422 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.127532 kubelet[1982]: E0714 21:58:37.127516 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.137535 kubelet[1982]: E0714 21:58:37.137509 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:37.137681 kubelet[1982]: W0714 21:58:37.137656 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:37.137757 kubelet[1982]: E0714 21:58:37.137742 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:37.322000 audit[2551]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=2551 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:58:37.322000 audit[2551]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffc518cdb0 a2=0 a3=1 items=0 ppid=2082 pid=2551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:37.322000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:58:37.331000 audit[2551]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2551 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:58:37.331000 audit[2551]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc518cdb0 a2=0 a3=1 items=0 ppid=2082 pid=2551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:37.331000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:58:37.764760 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount161335123.mount: Deactivated successfully. Jul 14 21:58:38.150428 kubelet[1982]: E0714 21:58:38.150269 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-jtcvj" podUID="3c931f77-c334-4b3e-a241-dda45696bef8" Jul 14 21:58:38.478430 env[1213]: time="2025-07-14T21:58:38.478385537Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:38.480415 env[1213]: time="2025-07-14T21:58:38.480370934Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:38.481831 env[1213]: time="2025-07-14T21:58:38.481807361Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:38.483195 env[1213]: time="2025-07-14T21:58:38.483153747Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:38.483707 env[1213]: time="2025-07-14T21:58:38.483671877Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2\"" Jul 14 21:58:38.487071 env[1213]: time="2025-07-14T21:58:38.487030900Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 14 21:58:38.495593 env[1213]: time="2025-07-14T21:58:38.495554421Z" level=info msg="CreateContainer within sandbox \"802b15e0fdae607a689a9f743c99b502d6f0d60dfaff9ec469129e65d24b5eaf\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 14 21:58:38.507532 env[1213]: time="2025-07-14T21:58:38.507478046Z" level=info msg="CreateContainer within sandbox \"802b15e0fdae607a689a9f743c99b502d6f0d60dfaff9ec469129e65d24b5eaf\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"1ac32cee9de22b7fd327eea0981cdb2666acd7e2b7743b2a8f0fe14959eef5d2\"" Jul 14 21:58:38.508126 env[1213]: time="2025-07-14T21:58:38.508093338Z" level=info msg="StartContainer for \"1ac32cee9de22b7fd327eea0981cdb2666acd7e2b7743b2a8f0fe14959eef5d2\"" Jul 14 21:58:38.531758 systemd[1]: Started cri-containerd-1ac32cee9de22b7fd327eea0981cdb2666acd7e2b7743b2a8f0fe14959eef5d2.scope. Jul 14 21:58:38.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.570000 audit: BPF prog-id=123 op=LOAD Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit[2563]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400018db38 a2=10 a3=0 items=0 ppid=2389 pid=2563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:38.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161633332636565396465323262376664333237656561303938316364 Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit[2563]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400018d5a0 a2=3c a3=0 items=0 ppid=2389 pid=2563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:38.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161633332636565396465323262376664333237656561303938316364 Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit: BPF prog-id=124 op=LOAD Jul 14 21:58:38.571000 audit[2563]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400018d8e0 a2=78 a3=0 items=0 ppid=2389 pid=2563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:38.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161633332636565396465323262376664333237656561303938316364 Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit: BPF prog-id=125 op=LOAD Jul 14 21:58:38.571000 audit[2563]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400018d670 a2=78 a3=0 items=0 ppid=2389 pid=2563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:38.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161633332636565396465323262376664333237656561303938316364 Jul 14 21:58:38.571000 audit: BPF prog-id=125 op=UNLOAD Jul 14 21:58:38.571000 audit: BPF prog-id=124 op=UNLOAD Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:38.571000 audit: BPF prog-id=126 op=LOAD Jul 14 21:58:38.571000 audit[2563]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400018db40 a2=78 a3=0 items=0 ppid=2389 pid=2563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:38.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161633332636565396465323262376664333237656561303938316364 Jul 14 21:58:38.625728 env[1213]: time="2025-07-14T21:58:38.625672199Z" level=info msg="StartContainer for \"1ac32cee9de22b7fd327eea0981cdb2666acd7e2b7743b2a8f0fe14959eef5d2\" returns successfully" Jul 14 21:58:39.222303 kubelet[1982]: E0714 21:58:39.222261 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:39.224001 kubelet[1982]: E0714 21:58:39.223968 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.224001 kubelet[1982]: W0714 21:58:39.223992 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.224001 kubelet[1982]: E0714 21:58:39.224012 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.224273 kubelet[1982]: E0714 21:58:39.224247 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.224273 kubelet[1982]: W0714 21:58:39.224261 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.224273 kubelet[1982]: E0714 21:58:39.224272 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.224541 kubelet[1982]: E0714 21:58:39.224494 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.224541 kubelet[1982]: W0714 21:58:39.224511 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.224541 kubelet[1982]: E0714 21:58:39.224523 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.224985 kubelet[1982]: E0714 21:58:39.224924 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.224985 kubelet[1982]: W0714 21:58:39.224943 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.224985 kubelet[1982]: E0714 21:58:39.224955 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.225813 kubelet[1982]: E0714 21:58:39.225793 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.225813 kubelet[1982]: W0714 21:58:39.225810 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.226199 kubelet[1982]: E0714 21:58:39.225823 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.226199 kubelet[1982]: E0714 21:58:39.226080 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.226199 kubelet[1982]: W0714 21:58:39.226091 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.226199 kubelet[1982]: E0714 21:58:39.226104 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.226309 kubelet[1982]: E0714 21:58:39.226263 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.226309 kubelet[1982]: W0714 21:58:39.226272 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.226309 kubelet[1982]: E0714 21:58:39.226281 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.226435 kubelet[1982]: E0714 21:58:39.226418 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.226435 kubelet[1982]: W0714 21:58:39.226428 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.226435 kubelet[1982]: E0714 21:58:39.226436 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.227334 kubelet[1982]: E0714 21:58:39.226611 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.227334 kubelet[1982]: W0714 21:58:39.226624 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.227334 kubelet[1982]: E0714 21:58:39.226632 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.227334 kubelet[1982]: E0714 21:58:39.226787 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.227334 kubelet[1982]: W0714 21:58:39.226796 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.227334 kubelet[1982]: E0714 21:58:39.226805 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.227334 kubelet[1982]: E0714 21:58:39.227128 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.227334 kubelet[1982]: W0714 21:58:39.227136 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.227334 kubelet[1982]: E0714 21:58:39.227144 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.227697 kubelet[1982]: E0714 21:58:39.227478 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.227697 kubelet[1982]: W0714 21:58:39.227488 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.227697 kubelet[1982]: E0714 21:58:39.227497 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.228494 kubelet[1982]: E0714 21:58:39.228468 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.228494 kubelet[1982]: W0714 21:58:39.228486 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.228578 kubelet[1982]: E0714 21:58:39.228498 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.228778 kubelet[1982]: E0714 21:58:39.228747 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.228778 kubelet[1982]: W0714 21:58:39.228767 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.228778 kubelet[1982]: E0714 21:58:39.228780 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.232064 kubelet[1982]: E0714 21:58:39.231776 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.232064 kubelet[1982]: W0714 21:58:39.231798 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.232064 kubelet[1982]: E0714 21:58:39.231813 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.237763 kubelet[1982]: E0714 21:58:39.237736 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.237763 kubelet[1982]: W0714 21:58:39.237758 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.237918 kubelet[1982]: E0714 21:58:39.237775 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.238004 kubelet[1982]: E0714 21:58:39.237988 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.238004 kubelet[1982]: W0714 21:58:39.238001 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.238071 kubelet[1982]: E0714 21:58:39.238018 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.238277 kubelet[1982]: E0714 21:58:39.238260 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.238313 kubelet[1982]: W0714 21:58:39.238278 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.238313 kubelet[1982]: E0714 21:58:39.238298 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.238475 kubelet[1982]: E0714 21:58:39.238464 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.238506 kubelet[1982]: W0714 21:58:39.238475 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.238506 kubelet[1982]: E0714 21:58:39.238485 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.238631 kubelet[1982]: E0714 21:58:39.238619 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.238631 kubelet[1982]: W0714 21:58:39.238630 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.238695 kubelet[1982]: E0714 21:58:39.238642 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.238887 kubelet[1982]: E0714 21:58:39.238873 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.238887 kubelet[1982]: W0714 21:58:39.238887 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.239030 kubelet[1982]: E0714 21:58:39.238902 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.239408 kubelet[1982]: E0714 21:58:39.239386 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.239408 kubelet[1982]: W0714 21:58:39.239401 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.239494 kubelet[1982]: E0714 21:58:39.239450 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.239550 kubelet[1982]: E0714 21:58:39.239537 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.239585 kubelet[1982]: W0714 21:58:39.239551 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.239585 kubelet[1982]: E0714 21:58:39.239570 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.239684 kubelet[1982]: E0714 21:58:39.239673 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.239731 kubelet[1982]: W0714 21:58:39.239684 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.239731 kubelet[1982]: E0714 21:58:39.239698 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.240041 kubelet[1982]: E0714 21:58:39.240023 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.240041 kubelet[1982]: W0714 21:58:39.240039 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.240183 kubelet[1982]: E0714 21:58:39.240054 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.240212 kubelet[1982]: E0714 21:58:39.240202 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.240212 kubelet[1982]: W0714 21:58:39.240210 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.240265 kubelet[1982]: E0714 21:58:39.240220 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.240426 kubelet[1982]: E0714 21:58:39.240410 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.240426 kubelet[1982]: W0714 21:58:39.240421 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.240485 kubelet[1982]: E0714 21:58:39.240435 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.240783 kubelet[1982]: E0714 21:58:39.240764 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.240783 kubelet[1982]: W0714 21:58:39.240781 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.240882 kubelet[1982]: E0714 21:58:39.240800 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.242758 kubelet[1982]: E0714 21:58:39.241123 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.242758 kubelet[1982]: W0714 21:58:39.241142 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.242758 kubelet[1982]: E0714 21:58:39.241162 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.242758 kubelet[1982]: E0714 21:58:39.241426 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.242758 kubelet[1982]: W0714 21:58:39.241436 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.242758 kubelet[1982]: E0714 21:58:39.241449 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.242758 kubelet[1982]: E0714 21:58:39.241610 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.242758 kubelet[1982]: W0714 21:58:39.241618 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.242758 kubelet[1982]: E0714 21:58:39.241629 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.242758 kubelet[1982]: E0714 21:58:39.242603 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.243069 kubelet[1982]: W0714 21:58:39.242622 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.243069 kubelet[1982]: E0714 21:58:39.242761 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.243069 kubelet[1982]: E0714 21:58:39.242943 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 21:58:39.243069 kubelet[1982]: W0714 21:58:39.242954 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 21:58:39.243069 kubelet[1982]: E0714 21:58:39.242965 1982 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 21:58:39.243366 kubelet[1982]: I0714 21:58:39.243320 1982 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-5966b485b-xctpk" podStartSLOduration=1.488850394 podStartE2EDuration="3.243305925s" podCreationTimestamp="2025-07-14 21:58:36 +0000 UTC" firstStartedPulling="2025-07-14 21:58:36.732346205 +0000 UTC m=+23.668144748" lastFinishedPulling="2025-07-14 21:58:38.486801616 +0000 UTC m=+25.422600279" observedRunningTime="2025-07-14 21:58:39.242079542 +0000 UTC m=+26.177878125" watchObservedRunningTime="2025-07-14 21:58:39.243305925 +0000 UTC m=+26.179104508" Jul 14 21:58:39.575055 env[1213]: time="2025-07-14T21:58:39.575006266Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:39.577072 env[1213]: time="2025-07-14T21:58:39.577036503Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:39.579045 env[1213]: time="2025-07-14T21:58:39.579015100Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:39.581225 env[1213]: time="2025-07-14T21:58:39.581198101Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:39.582345 env[1213]: time="2025-07-14T21:58:39.581989596Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f\"" Jul 14 21:58:39.595526 env[1213]: time="2025-07-14T21:58:39.595483207Z" level=info msg="CreateContainer within sandbox \"1cbbfe6f73704ec4e4b2a1ea0ddfe3e63f630117a1870b9ae2cfd69fa4770497\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 14 21:58:39.609942 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount63886260.mount: Deactivated successfully. Jul 14 21:58:39.614096 env[1213]: time="2025-07-14T21:58:39.614031633Z" level=info msg="CreateContainer within sandbox \"1cbbfe6f73704ec4e4b2a1ea0ddfe3e63f630117a1870b9ae2cfd69fa4770497\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"ed292b3890c24f3664eb6fc2acb457ec39ff58e91c1b3ebfb16ec64bd00133b1\"" Jul 14 21:58:39.616525 env[1213]: time="2025-07-14T21:58:39.615890987Z" level=info msg="StartContainer for \"ed292b3890c24f3664eb6fc2acb457ec39ff58e91c1b3ebfb16ec64bd00133b1\"" Jul 14 21:58:39.649757 systemd[1]: Started cri-containerd-ed292b3890c24f3664eb6fc2acb457ec39ff58e91c1b3ebfb16ec64bd00133b1.scope. Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit[2638]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2485 pid=2638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:39.669000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564323932623338393063323466333636346562366663326163623435 Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit: BPF prog-id=127 op=LOAD Jul 14 21:58:39.669000 audit[2638]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2485 pid=2638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:39.669000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564323932623338393063323466333636346562366663326163623435 Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit: BPF prog-id=128 op=LOAD Jul 14 21:58:39.669000 audit[2638]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2485 pid=2638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:39.669000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564323932623338393063323466333636346562366663326163623435 Jul 14 21:58:39.669000 audit: BPF prog-id=128 op=UNLOAD Jul 14 21:58:39.669000 audit: BPF prog-id=127 op=UNLOAD Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:39.669000 audit: BPF prog-id=129 op=LOAD Jul 14 21:58:39.669000 audit[2638]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2485 pid=2638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:39.669000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564323932623338393063323466333636346562366663326163623435 Jul 14 21:58:39.690408 env[1213]: time="2025-07-14T21:58:39.690348095Z" level=info msg="StartContainer for \"ed292b3890c24f3664eb6fc2acb457ec39ff58e91c1b3ebfb16ec64bd00133b1\" returns successfully" Jul 14 21:58:39.714837 systemd[1]: cri-containerd-ed292b3890c24f3664eb6fc2acb457ec39ff58e91c1b3ebfb16ec64bd00133b1.scope: Deactivated successfully. Jul 14 21:58:39.719000 audit: BPF prog-id=129 op=UNLOAD Jul 14 21:58:39.814004 env[1213]: time="2025-07-14T21:58:39.813952478Z" level=info msg="shim disconnected" id=ed292b3890c24f3664eb6fc2acb457ec39ff58e91c1b3ebfb16ec64bd00133b1 Jul 14 21:58:39.814004 env[1213]: time="2025-07-14T21:58:39.814001679Z" level=warning msg="cleaning up after shim disconnected" id=ed292b3890c24f3664eb6fc2acb457ec39ff58e91c1b3ebfb16ec64bd00133b1 namespace=k8s.io Jul 14 21:58:39.814004 env[1213]: time="2025-07-14T21:58:39.814013079Z" level=info msg="cleaning up dead shim" Jul 14 21:58:39.821992 env[1213]: time="2025-07-14T21:58:39.821934027Z" level=warning msg="cleanup warnings time=\"2025-07-14T21:58:39Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2676 runtime=io.containerd.runc.v2\n" Jul 14 21:58:40.150816 kubelet[1982]: E0714 21:58:40.150745 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-jtcvj" podUID="3c931f77-c334-4b3e-a241-dda45696bef8" Jul 14 21:58:40.219237 kubelet[1982]: I0714 21:58:40.219204 1982 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 21:58:40.219504 kubelet[1982]: E0714 21:58:40.219484 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:40.220390 env[1213]: time="2025-07-14T21:58:40.220356558Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 14 21:58:40.606995 systemd[1]: run-containerd-runc-k8s.io-ed292b3890c24f3664eb6fc2acb457ec39ff58e91c1b3ebfb16ec64bd00133b1-runc.EFZFnU.mount: Deactivated successfully. Jul 14 21:58:40.607089 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ed292b3890c24f3664eb6fc2acb457ec39ff58e91c1b3ebfb16ec64bd00133b1-rootfs.mount: Deactivated successfully. Jul 14 21:58:42.149184 kubelet[1982]: E0714 21:58:42.149034 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-jtcvj" podUID="3c931f77-c334-4b3e-a241-dda45696bef8" Jul 14 21:58:43.550354 env[1213]: time="2025-07-14T21:58:43.550299308Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:43.553261 env[1213]: time="2025-07-14T21:58:43.553210280Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:43.554754 env[1213]: time="2025-07-14T21:58:43.554725347Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:43.558844 env[1213]: time="2025-07-14T21:58:43.558801459Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:43.559839 env[1213]: time="2025-07-14T21:58:43.559800637Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588\"" Jul 14 21:58:43.562443 env[1213]: time="2025-07-14T21:58:43.562404763Z" level=info msg="CreateContainer within sandbox \"1cbbfe6f73704ec4e4b2a1ea0ddfe3e63f630117a1870b9ae2cfd69fa4770497\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 14 21:58:43.578633 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2092016130.mount: Deactivated successfully. Jul 14 21:58:43.584607 env[1213]: time="2025-07-14T21:58:43.584547476Z" level=info msg="CreateContainer within sandbox \"1cbbfe6f73704ec4e4b2a1ea0ddfe3e63f630117a1870b9ae2cfd69fa4770497\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"a4b723e122888a4f9eb59d87dc7ac1c98c1002a6c893ac6bd3ec6b6b806ba81d\"" Jul 14 21:58:43.585488 env[1213]: time="2025-07-14T21:58:43.585458613Z" level=info msg="StartContainer for \"a4b723e122888a4f9eb59d87dc7ac1c98c1002a6c893ac6bd3ec6b6b806ba81d\"" Jul 14 21:58:43.614695 systemd[1]: Started cri-containerd-a4b723e122888a4f9eb59d87dc7ac1c98c1002a6c893ac6bd3ec6b6b806ba81d.scope. Jul 14 21:58:43.646000 audit[2701]: AVC avc: denied { perfmon } for pid=2701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.650421 kernel: kauditd_printk_skb: 211 callbacks suppressed Jul 14 21:58:43.650572 kernel: audit: type=1400 audit(1752530323.646:974): avc: denied { perfmon } for pid=2701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.650604 kernel: audit: type=1300 audit(1752530323.646:974): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2485 pid=2701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:43.646000 audit[2701]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2485 pid=2701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:43.646000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134623732336531323238383861346639656235396438376463376163 Jul 14 21:58:43.657855 kernel: audit: type=1327 audit(1752530323.646:974): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134623732336531323238383861346639656235396438376463376163 Jul 14 21:58:43.646000 audit[2701]: AVC avc: denied { bpf } for pid=2701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.660465 kernel: audit: type=1400 audit(1752530323.646:975): avc: denied { bpf } for pid=2701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.660599 kernel: audit: type=1400 audit(1752530323.646:975): avc: denied { bpf } for pid=2701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.646000 audit[2701]: AVC avc: denied { bpf } for pid=2701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.646000 audit[2701]: AVC avc: denied { bpf } for pid=2701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.666007 kernel: audit: type=1400 audit(1752530323.646:975): avc: denied { bpf } for pid=2701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.646000 audit[2701]: AVC avc: denied { perfmon } for pid=2701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.668602 kernel: audit: type=1400 audit(1752530323.646:975): avc: denied { perfmon } for pid=2701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.668711 kernel: audit: type=1400 audit(1752530323.646:975): avc: denied { perfmon } for pid=2701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.646000 audit[2701]: AVC avc: denied { perfmon } for pid=2701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.646000 audit[2701]: AVC avc: denied { perfmon } for pid=2701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.673599 kernel: audit: type=1400 audit(1752530323.646:975): avc: denied { perfmon } for pid=2701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.673668 kernel: audit: type=1400 audit(1752530323.646:975): avc: denied { perfmon } for pid=2701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.646000 audit[2701]: AVC avc: denied { perfmon } for pid=2701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.646000 audit[2701]: AVC avc: denied { perfmon } for pid=2701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.646000 audit[2701]: AVC avc: denied { bpf } for pid=2701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.646000 audit[2701]: AVC avc: denied { bpf } for pid=2701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.646000 audit: BPF prog-id=130 op=LOAD Jul 14 21:58:43.646000 audit[2701]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2485 pid=2701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:43.646000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134623732336531323238383861346639656235396438376463376163 Jul 14 21:58:43.646000 audit[2701]: AVC avc: denied { bpf } for pid=2701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.646000 audit[2701]: AVC avc: denied { bpf } for pid=2701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.646000 audit[2701]: AVC avc: denied { perfmon } for pid=2701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.646000 audit[2701]: AVC avc: denied { perfmon } for pid=2701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.646000 audit[2701]: AVC avc: denied { perfmon } for pid=2701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.646000 audit[2701]: AVC avc: denied { perfmon } for pid=2701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.646000 audit[2701]: AVC avc: denied { perfmon } for pid=2701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.646000 audit[2701]: AVC avc: denied { bpf } for pid=2701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.646000 audit[2701]: AVC avc: denied { bpf } for pid=2701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.646000 audit: BPF prog-id=131 op=LOAD Jul 14 21:58:43.646000 audit[2701]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2485 pid=2701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:43.646000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134623732336531323238383861346639656235396438376463376163 Jul 14 21:58:43.649000 audit: BPF prog-id=131 op=UNLOAD Jul 14 21:58:43.650000 audit: BPF prog-id=130 op=UNLOAD Jul 14 21:58:43.650000 audit[2701]: AVC avc: denied { bpf } for pid=2701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.650000 audit[2701]: AVC avc: denied { bpf } for pid=2701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.650000 audit[2701]: AVC avc: denied { bpf } for pid=2701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.650000 audit[2701]: AVC avc: denied { perfmon } for pid=2701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.650000 audit[2701]: AVC avc: denied { perfmon } for pid=2701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.650000 audit[2701]: AVC avc: denied { perfmon } for pid=2701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.650000 audit[2701]: AVC avc: denied { perfmon } for pid=2701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.650000 audit[2701]: AVC avc: denied { perfmon } for pid=2701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.650000 audit[2701]: AVC avc: denied { bpf } for pid=2701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.650000 audit[2701]: AVC avc: denied { bpf } for pid=2701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:43.650000 audit: BPF prog-id=132 op=LOAD Jul 14 21:58:43.650000 audit[2701]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2485 pid=2701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:43.650000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134623732336531323238383861346639656235396438376463376163 Jul 14 21:58:43.689585 env[1213]: time="2025-07-14T21:58:43.689534580Z" level=info msg="StartContainer for \"a4b723e122888a4f9eb59d87dc7ac1c98c1002a6c893ac6bd3ec6b6b806ba81d\" returns successfully" Jul 14 21:58:44.149602 kubelet[1982]: E0714 21:58:44.149359 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-jtcvj" podUID="3c931f77-c334-4b3e-a241-dda45696bef8" Jul 14 21:58:44.397041 env[1213]: time="2025-07-14T21:58:44.396990267Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 14 21:58:44.399793 systemd[1]: cri-containerd-a4b723e122888a4f9eb59d87dc7ac1c98c1002a6c893ac6bd3ec6b6b806ba81d.scope: Deactivated successfully. Jul 14 21:58:44.405000 audit: BPF prog-id=132 op=UNLOAD Jul 14 21:58:44.417168 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a4b723e122888a4f9eb59d87dc7ac1c98c1002a6c893ac6bd3ec6b6b806ba81d-rootfs.mount: Deactivated successfully. Jul 14 21:58:44.443619 env[1213]: time="2025-07-14T21:58:44.443571726Z" level=info msg="shim disconnected" id=a4b723e122888a4f9eb59d87dc7ac1c98c1002a6c893ac6bd3ec6b6b806ba81d Jul 14 21:58:44.443619 env[1213]: time="2025-07-14T21:58:44.443616486Z" level=warning msg="cleaning up after shim disconnected" id=a4b723e122888a4f9eb59d87dc7ac1c98c1002a6c893ac6bd3ec6b6b806ba81d namespace=k8s.io Jul 14 21:58:44.443619 env[1213]: time="2025-07-14T21:58:44.443626447Z" level=info msg="cleaning up dead shim" Jul 14 21:58:44.451943 env[1213]: time="2025-07-14T21:58:44.451905432Z" level=warning msg="cleanup warnings time=\"2025-07-14T21:58:44Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2741 runtime=io.containerd.runc.v2\n" Jul 14 21:58:44.485289 kubelet[1982]: I0714 21:58:44.485249 1982 kubelet_node_status.go:488] "Fast updating node status as it just became ready" Jul 14 21:58:44.510594 kubelet[1982]: W0714 21:58:44.510518 1982 reflector.go:561] object-"calico-apiserver"/"calico-apiserver-certs": failed to list *v1.Secret: secrets "calico-apiserver-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "calico-apiserver": no relationship found between node 'localhost' and this object Jul 14 21:58:44.510594 kubelet[1982]: E0714 21:58:44.510562 1982 reflector.go:158] "Unhandled Error" err="object-\"calico-apiserver\"/\"calico-apiserver-certs\": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets \"calico-apiserver-certs\" is forbidden: User \"system:node:localhost\" cannot list resource \"secrets\" in API group \"\" in the namespace \"calico-apiserver\": no relationship found between node 'localhost' and this object" logger="UnhandledError" Jul 14 21:58:44.514736 kubelet[1982]: W0714 21:58:44.514706 1982 reflector.go:561] object-"kube-system"/"coredns": failed to list *v1.ConfigMap: configmaps "coredns" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Jul 14 21:58:44.514906 kubelet[1982]: E0714 21:58:44.514748 1982 reflector.go:158] "Unhandled Error" err="object-\"kube-system\"/\"coredns\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"coredns\" is forbidden: User \"system:node:localhost\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"kube-system\": no relationship found between node 'localhost' and this object" logger="UnhandledError" Jul 14 21:58:44.514970 kubelet[1982]: W0714 21:58:44.514945 1982 reflector.go:561] object-"calico-system"/"whisker-ca-bundle": failed to list *v1.ConfigMap: configmaps "whisker-ca-bundle" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'localhost' and this object Jul 14 21:58:44.515010 kubelet[1982]: E0714 21:58:44.514973 1982 reflector.go:158] "Unhandled Error" err="object-\"calico-system\"/\"whisker-ca-bundle\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"whisker-ca-bundle\" is forbidden: User \"system:node:localhost\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'localhost' and this object" logger="UnhandledError" Jul 14 21:58:44.517598 systemd[1]: Created slice kubepods-besteffort-podf1062b0e_e331_4c57_a847_8cf87bfec2f2.slice. Jul 14 21:58:44.521569 systemd[1]: Created slice kubepods-burstable-pod2aa81a5c_ff84_4a72_ac44_ad3807eb290a.slice. Jul 14 21:58:44.526299 systemd[1]: Created slice kubepods-burstable-pod4411d551_971a_4801_a959_d2959312b095.slice. Jul 14 21:58:44.531921 systemd[1]: Created slice kubepods-besteffort-poda3bdbffd_037e_4027_9eb7_7ff772a71559.slice. Jul 14 21:58:44.538812 systemd[1]: Created slice kubepods-besteffort-podd21ca187_3e16_486f_8f0c_46d4535071eb.slice. Jul 14 21:58:44.543933 systemd[1]: Created slice kubepods-besteffort-pod1df54ff6_b87e_44a8_b863_4594c2e303e2.slice. Jul 14 21:58:44.549490 systemd[1]: Created slice kubepods-besteffort-pod3c67d7b7_7d0d_4313_a8cc_1f1226c108af.slice. Jul 14 21:58:44.575631 kubelet[1982]: I0714 21:58:44.575588 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/3c67d7b7-7d0d-4313-a8cc-1f1226c108af-calico-apiserver-certs\") pod \"calico-apiserver-5789c98db4-qmxz9\" (UID: \"3c67d7b7-7d0d-4313-a8cc-1f1226c108af\") " pod="calico-apiserver/calico-apiserver-5789c98db4-qmxz9" Jul 14 21:58:44.575923 kubelet[1982]: I0714 21:58:44.575905 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-psr24\" (UniqueName: \"kubernetes.io/projected/3c67d7b7-7d0d-4313-a8cc-1f1226c108af-kube-api-access-psr24\") pod \"calico-apiserver-5789c98db4-qmxz9\" (UID: \"3c67d7b7-7d0d-4313-a8cc-1f1226c108af\") " pod="calico-apiserver/calico-apiserver-5789c98db4-qmxz9" Jul 14 21:58:44.576064 kubelet[1982]: I0714 21:58:44.576047 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qnlkl\" (UniqueName: \"kubernetes.io/projected/1df54ff6-b87e-44a8-b863-4594c2e303e2-kube-api-access-qnlkl\") pod \"whisker-7b4995f5bb-js2nx\" (UID: \"1df54ff6-b87e-44a8-b863-4594c2e303e2\") " pod="calico-system/whisker-7b4995f5bb-js2nx" Jul 14 21:58:44.576178 kubelet[1982]: I0714 21:58:44.576162 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cmg6l\" (UniqueName: \"kubernetes.io/projected/4411d551-971a-4801-a959-d2959312b095-kube-api-access-cmg6l\") pod \"coredns-7c65d6cfc9-hk8zv\" (UID: \"4411d551-971a-4801-a959-d2959312b095\") " pod="kube-system/coredns-7c65d6cfc9-hk8zv" Jul 14 21:58:44.576287 kubelet[1982]: I0714 21:58:44.576273 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d21ca187-3e16-486f-8f0c-46d4535071eb-tigera-ca-bundle\") pod \"calico-kube-controllers-8c8858955-jvl7q\" (UID: \"d21ca187-3e16-486f-8f0c-46d4535071eb\") " pod="calico-system/calico-kube-controllers-8c8858955-jvl7q" Jul 14 21:58:44.576546 kubelet[1982]: I0714 21:58:44.576501 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1df54ff6-b87e-44a8-b863-4594c2e303e2-whisker-ca-bundle\") pod \"whisker-7b4995f5bb-js2nx\" (UID: \"1df54ff6-b87e-44a8-b863-4594c2e303e2\") " pod="calico-system/whisker-7b4995f5bb-js2nx" Jul 14 21:58:44.576656 kubelet[1982]: I0714 21:58:44.576642 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/f1062b0e-e331-4c57-a847-8cf87bfec2f2-goldmane-key-pair\") pod \"goldmane-58fd7646b9-6w85n\" (UID: \"f1062b0e-e331-4c57-a847-8cf87bfec2f2\") " pod="calico-system/goldmane-58fd7646b9-6w85n" Jul 14 21:58:44.576775 kubelet[1982]: I0714 21:58:44.576760 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/1df54ff6-b87e-44a8-b863-4594c2e303e2-whisker-backend-key-pair\") pod \"whisker-7b4995f5bb-js2nx\" (UID: \"1df54ff6-b87e-44a8-b863-4594c2e303e2\") " pod="calico-system/whisker-7b4995f5bb-js2nx" Jul 14 21:58:44.576926 kubelet[1982]: I0714 21:58:44.576903 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/4411d551-971a-4801-a959-d2959312b095-config-volume\") pod \"coredns-7c65d6cfc9-hk8zv\" (UID: \"4411d551-971a-4801-a959-d2959312b095\") " pod="kube-system/coredns-7c65d6cfc9-hk8zv" Jul 14 21:58:44.577044 kubelet[1982]: I0714 21:58:44.577030 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/2aa81a5c-ff84-4a72-ac44-ad3807eb290a-config-volume\") pod \"coredns-7c65d6cfc9-b5jln\" (UID: \"2aa81a5c-ff84-4a72-ac44-ad3807eb290a\") " pod="kube-system/coredns-7c65d6cfc9-b5jln" Jul 14 21:58:44.577182 kubelet[1982]: I0714 21:58:44.577152 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7hn5h\" (UniqueName: \"kubernetes.io/projected/d21ca187-3e16-486f-8f0c-46d4535071eb-kube-api-access-7hn5h\") pod \"calico-kube-controllers-8c8858955-jvl7q\" (UID: \"d21ca187-3e16-486f-8f0c-46d4535071eb\") " pod="calico-system/calico-kube-controllers-8c8858955-jvl7q" Jul 14 21:58:44.577299 kubelet[1982]: I0714 21:58:44.577283 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/a3bdbffd-037e-4027-9eb7-7ff772a71559-calico-apiserver-certs\") pod \"calico-apiserver-5789c98db4-s57m5\" (UID: \"a3bdbffd-037e-4027-9eb7-7ff772a71559\") " pod="calico-apiserver/calico-apiserver-5789c98db4-s57m5" Jul 14 21:58:44.577412 kubelet[1982]: I0714 21:58:44.577397 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f1062b0e-e331-4c57-a847-8cf87bfec2f2-goldmane-ca-bundle\") pod \"goldmane-58fd7646b9-6w85n\" (UID: \"f1062b0e-e331-4c57-a847-8cf87bfec2f2\") " pod="calico-system/goldmane-58fd7646b9-6w85n" Jul 14 21:58:44.577528 kubelet[1982]: I0714 21:58:44.577514 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lqv7x\" (UniqueName: \"kubernetes.io/projected/f1062b0e-e331-4c57-a847-8cf87bfec2f2-kube-api-access-lqv7x\") pod \"goldmane-58fd7646b9-6w85n\" (UID: \"f1062b0e-e331-4c57-a847-8cf87bfec2f2\") " pod="calico-system/goldmane-58fd7646b9-6w85n" Jul 14 21:58:44.577657 kubelet[1982]: I0714 21:58:44.577641 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mq9fz\" (UniqueName: \"kubernetes.io/projected/a3bdbffd-037e-4027-9eb7-7ff772a71559-kube-api-access-mq9fz\") pod \"calico-apiserver-5789c98db4-s57m5\" (UID: \"a3bdbffd-037e-4027-9eb7-7ff772a71559\") " pod="calico-apiserver/calico-apiserver-5789c98db4-s57m5" Jul 14 21:58:44.577781 kubelet[1982]: I0714 21:58:44.577766 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nkmns\" (UniqueName: \"kubernetes.io/projected/2aa81a5c-ff84-4a72-ac44-ad3807eb290a-kube-api-access-nkmns\") pod \"coredns-7c65d6cfc9-b5jln\" (UID: \"2aa81a5c-ff84-4a72-ac44-ad3807eb290a\") " pod="kube-system/coredns-7c65d6cfc9-b5jln" Jul 14 21:58:44.577945 kubelet[1982]: I0714 21:58:44.577906 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/f1062b0e-e331-4c57-a847-8cf87bfec2f2-config\") pod \"goldmane-58fd7646b9-6w85n\" (UID: \"f1062b0e-e331-4c57-a847-8cf87bfec2f2\") " pod="calico-system/goldmane-58fd7646b9-6w85n" Jul 14 21:58:44.820565 env[1213]: time="2025-07-14T21:58:44.820509268Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-6w85n,Uid:f1062b0e-e331-4c57-a847-8cf87bfec2f2,Namespace:calico-system,Attempt:0,}" Jul 14 21:58:44.842255 env[1213]: time="2025-07-14T21:58:44.842205289Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-8c8858955-jvl7q,Uid:d21ca187-3e16-486f-8f0c-46d4535071eb,Namespace:calico-system,Attempt:0,}" Jul 14 21:58:45.078165 env[1213]: time="2025-07-14T21:58:45.078004178Z" level=error msg="Failed to destroy network for sandbox \"a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:45.078427 env[1213]: time="2025-07-14T21:58:45.078381144Z" level=error msg="encountered an error cleaning up failed sandbox \"a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:45.078558 env[1213]: time="2025-07-14T21:58:45.078527107Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-8c8858955-jvl7q,Uid:d21ca187-3e16-486f-8f0c-46d4535071eb,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:45.079927 kubelet[1982]: E0714 21:58:45.079483 1982 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:45.079927 kubelet[1982]: E0714 21:58:45.079556 1982 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-8c8858955-jvl7q" Jul 14 21:58:45.079927 kubelet[1982]: E0714 21:58:45.079575 1982 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-8c8858955-jvl7q" Jul 14 21:58:45.080109 kubelet[1982]: E0714 21:58:45.079627 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-8c8858955-jvl7q_calico-system(d21ca187-3e16-486f-8f0c-46d4535071eb)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-8c8858955-jvl7q_calico-system(d21ca187-3e16-486f-8f0c-46d4535071eb)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-8c8858955-jvl7q" podUID="d21ca187-3e16-486f-8f0c-46d4535071eb" Jul 14 21:58:45.080281 env[1213]: time="2025-07-14T21:58:45.080230937Z" level=error msg="Failed to destroy network for sandbox \"0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:45.080659 env[1213]: time="2025-07-14T21:58:45.080625584Z" level=error msg="encountered an error cleaning up failed sandbox \"0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:45.080785 env[1213]: time="2025-07-14T21:58:45.080758266Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-6w85n,Uid:f1062b0e-e331-4c57-a847-8cf87bfec2f2,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:45.081309 kubelet[1982]: E0714 21:58:45.081173 1982 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:45.081309 kubelet[1982]: E0714 21:58:45.081213 1982 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-58fd7646b9-6w85n" Jul 14 21:58:45.081309 kubelet[1982]: E0714 21:58:45.081228 1982 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-58fd7646b9-6w85n" Jul 14 21:58:45.081436 kubelet[1982]: E0714 21:58:45.081258 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-58fd7646b9-6w85n_calico-system(f1062b0e-e331-4c57-a847-8cf87bfec2f2)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-58fd7646b9-6w85n_calico-system(f1062b0e-e331-4c57-a847-8cf87bfec2f2)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-58fd7646b9-6w85n" podUID="f1062b0e-e331-4c57-a847-8cf87bfec2f2" Jul 14 21:58:45.234094 kubelet[1982]: I0714 21:58:45.234064 1982 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" Jul 14 21:58:45.235766 env[1213]: time="2025-07-14T21:58:45.234737584Z" level=info msg="StopPodSandbox for \"0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191\"" Jul 14 21:58:45.240657 kubelet[1982]: I0714 21:58:45.240173 1982 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" Jul 14 21:58:45.240912 env[1213]: time="2025-07-14T21:58:45.240769649Z" level=info msg="StopPodSandbox for \"a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50\"" Jul 14 21:58:45.241701 env[1213]: time="2025-07-14T21:58:45.241674945Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 14 21:58:45.262440 env[1213]: time="2025-07-14T21:58:45.262386705Z" level=error msg="StopPodSandbox for \"0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191\" failed" error="failed to destroy network for sandbox \"0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:45.262893 kubelet[1982]: E0714 21:58:45.262778 1982 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" Jul 14 21:58:45.262893 kubelet[1982]: E0714 21:58:45.262847 1982 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191"} Jul 14 21:58:45.263026 kubelet[1982]: E0714 21:58:45.262917 1982 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"f1062b0e-e331-4c57-a847-8cf87bfec2f2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 21:58:45.263026 kubelet[1982]: E0714 21:58:45.262938 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"f1062b0e-e331-4c57-a847-8cf87bfec2f2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-58fd7646b9-6w85n" podUID="f1062b0e-e331-4c57-a847-8cf87bfec2f2" Jul 14 21:58:45.273864 env[1213]: time="2025-07-14T21:58:45.273788383Z" level=error msg="StopPodSandbox for \"a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50\" failed" error="failed to destroy network for sandbox \"a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:45.274058 kubelet[1982]: E0714 21:58:45.274023 1982 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" Jul 14 21:58:45.274132 kubelet[1982]: E0714 21:58:45.274072 1982 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50"} Jul 14 21:58:45.274132 kubelet[1982]: E0714 21:58:45.274106 1982 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d21ca187-3e16-486f-8f0c-46d4535071eb\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 21:58:45.274212 kubelet[1982]: E0714 21:58:45.274125 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d21ca187-3e16-486f-8f0c-46d4535071eb\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-8c8858955-jvl7q" podUID="d21ca187-3e16-486f-8f0c-46d4535071eb" Jul 14 21:58:45.680393 kubelet[1982]: E0714 21:58:45.680358 1982 configmap.go:193] Couldn't get configMap calico-system/whisker-ca-bundle: failed to sync configmap cache: timed out waiting for the condition Jul 14 21:58:45.680558 kubelet[1982]: E0714 21:58:45.680436 1982 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/1df54ff6-b87e-44a8-b863-4594c2e303e2-whisker-ca-bundle podName:1df54ff6-b87e-44a8-b863-4594c2e303e2 nodeName:}" failed. No retries permitted until 2025-07-14 21:58:46.180417056 +0000 UTC m=+33.116215639 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "whisker-ca-bundle" (UniqueName: "kubernetes.io/configmap/1df54ff6-b87e-44a8-b863-4594c2e303e2-whisker-ca-bundle") pod "whisker-7b4995f5bb-js2nx" (UID: "1df54ff6-b87e-44a8-b863-4594c2e303e2") : failed to sync configmap cache: timed out waiting for the condition Jul 14 21:58:45.724553 kubelet[1982]: E0714 21:58:45.724510 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:45.725172 env[1213]: time="2025-07-14T21:58:45.725127794Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-b5jln,Uid:2aa81a5c-ff84-4a72-ac44-ad3807eb290a,Namespace:kube-system,Attempt:0,}" Jul 14 21:58:45.729110 kubelet[1982]: E0714 21:58:45.729065 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:58:45.729718 env[1213]: time="2025-07-14T21:58:45.729686713Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-hk8zv,Uid:4411d551-971a-4801-a959-d2959312b095,Namespace:kube-system,Attempt:0,}" Jul 14 21:58:45.735070 env[1213]: time="2025-07-14T21:58:45.735023846Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5789c98db4-s57m5,Uid:a3bdbffd-037e-4027-9eb7-7ff772a71559,Namespace:calico-apiserver,Attempt:0,}" Jul 14 21:58:45.757367 env[1213]: time="2025-07-14T21:58:45.757328954Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5789c98db4-qmxz9,Uid:3c67d7b7-7d0d-4313-a8cc-1f1226c108af,Namespace:calico-apiserver,Attempt:0,}" Jul 14 21:58:45.820221 env[1213]: time="2025-07-14T21:58:45.820164207Z" level=error msg="Failed to destroy network for sandbox \"27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:45.820570 env[1213]: time="2025-07-14T21:58:45.820519293Z" level=error msg="encountered an error cleaning up failed sandbox \"27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:45.820625 env[1213]: time="2025-07-14T21:58:45.820577774Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-b5jln,Uid:2aa81a5c-ff84-4a72-ac44-ad3807eb290a,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:45.820848 kubelet[1982]: E0714 21:58:45.820794 1982 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:45.820928 kubelet[1982]: E0714 21:58:45.820908 1982 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-b5jln" Jul 14 21:58:45.820994 kubelet[1982]: E0714 21:58:45.820969 1982 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-b5jln" Jul 14 21:58:45.821268 kubelet[1982]: E0714 21:58:45.821023 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-b5jln_kube-system(2aa81a5c-ff84-4a72-ac44-ad3807eb290a)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-b5jln_kube-system(2aa81a5c-ff84-4a72-ac44-ad3807eb290a)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-b5jln" podUID="2aa81a5c-ff84-4a72-ac44-ad3807eb290a" Jul 14 21:58:45.825698 env[1213]: time="2025-07-14T21:58:45.825642982Z" level=error msg="Failed to destroy network for sandbox \"e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:45.826054 env[1213]: time="2025-07-14T21:58:45.826013428Z" level=error msg="encountered an error cleaning up failed sandbox \"e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:45.826126 env[1213]: time="2025-07-14T21:58:45.826067229Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-hk8zv,Uid:4411d551-971a-4801-a959-d2959312b095,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:45.826771 kubelet[1982]: E0714 21:58:45.826286 1982 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:45.826771 kubelet[1982]: E0714 21:58:45.826337 1982 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-hk8zv" Jul 14 21:58:45.826771 kubelet[1982]: E0714 21:58:45.826372 1982 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-hk8zv" Jul 14 21:58:45.826937 kubelet[1982]: E0714 21:58:45.826410 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-hk8zv_kube-system(4411d551-971a-4801-a959-d2959312b095)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-hk8zv_kube-system(4411d551-971a-4801-a959-d2959312b095)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-hk8zv" podUID="4411d551-971a-4801-a959-d2959312b095" Jul 14 21:58:45.835943 env[1213]: time="2025-07-14T21:58:45.835889960Z" level=error msg="Failed to destroy network for sandbox \"065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:45.836305 env[1213]: time="2025-07-14T21:58:45.836219046Z" level=error msg="encountered an error cleaning up failed sandbox \"065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:45.836305 env[1213]: time="2025-07-14T21:58:45.836273687Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5789c98db4-s57m5,Uid:a3bdbffd-037e-4027-9eb7-7ff772a71559,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:45.836937 kubelet[1982]: E0714 21:58:45.836546 1982 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:45.836937 kubelet[1982]: E0714 21:58:45.836597 1982 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5789c98db4-s57m5" Jul 14 21:58:45.836937 kubelet[1982]: E0714 21:58:45.836629 1982 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5789c98db4-s57m5" Jul 14 21:58:45.837084 kubelet[1982]: E0714 21:58:45.836664 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5789c98db4-s57m5_calico-apiserver(a3bdbffd-037e-4027-9eb7-7ff772a71559)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5789c98db4-s57m5_calico-apiserver(a3bdbffd-037e-4027-9eb7-7ff772a71559)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5789c98db4-s57m5" podUID="a3bdbffd-037e-4027-9eb7-7ff772a71559" Jul 14 21:58:45.845378 env[1213]: time="2025-07-14T21:58:45.845321004Z" level=error msg="Failed to destroy network for sandbox \"64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:45.845696 env[1213]: time="2025-07-14T21:58:45.845652730Z" level=error msg="encountered an error cleaning up failed sandbox \"64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:45.845736 env[1213]: time="2025-07-14T21:58:45.845702931Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5789c98db4-qmxz9,Uid:3c67d7b7-7d0d-4313-a8cc-1f1226c108af,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:45.846221 kubelet[1982]: E0714 21:58:45.845904 1982 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:45.846221 kubelet[1982]: E0714 21:58:45.845955 1982 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5789c98db4-qmxz9" Jul 14 21:58:45.846221 kubelet[1982]: E0714 21:58:45.845972 1982 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5789c98db4-qmxz9" Jul 14 21:58:45.846388 kubelet[1982]: E0714 21:58:45.846011 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5789c98db4-qmxz9_calico-apiserver(3c67d7b7-7d0d-4313-a8cc-1f1226c108af)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5789c98db4-qmxz9_calico-apiserver(3c67d7b7-7d0d-4313-a8cc-1f1226c108af)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5789c98db4-qmxz9" podUID="3c67d7b7-7d0d-4313-a8cc-1f1226c108af" Jul 14 21:58:46.154383 systemd[1]: Created slice kubepods-besteffort-pod3c931f77_c334_4b3e_a241_dda45696bef8.slice. Jul 14 21:58:46.156695 env[1213]: time="2025-07-14T21:58:46.156648234Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-jtcvj,Uid:3c931f77-c334-4b3e-a241-dda45696bef8,Namespace:calico-system,Attempt:0,}" Jul 14 21:58:46.213181 env[1213]: time="2025-07-14T21:58:46.213124607Z" level=error msg="Failed to destroy network for sandbox \"62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:46.213664 env[1213]: time="2025-07-14T21:58:46.213630536Z" level=error msg="encountered an error cleaning up failed sandbox \"62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:46.213833 env[1213]: time="2025-07-14T21:58:46.213790618Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-jtcvj,Uid:3c931f77-c334-4b3e-a241-dda45696bef8,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:46.214198 kubelet[1982]: E0714 21:58:46.214154 1982 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:46.214277 kubelet[1982]: E0714 21:58:46.214230 1982 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-jtcvj" Jul 14 21:58:46.214277 kubelet[1982]: E0714 21:58:46.214252 1982 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-jtcvj" Jul 14 21:58:46.214343 kubelet[1982]: E0714 21:58:46.214299 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-jtcvj_calico-system(3c931f77-c334-4b3e-a241-dda45696bef8)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-jtcvj_calico-system(3c931f77-c334-4b3e-a241-dda45696bef8)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-jtcvj" podUID="3c931f77-c334-4b3e-a241-dda45696bef8" Jul 14 21:58:46.245740 kubelet[1982]: I0714 21:58:46.245687 1982 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" Jul 14 21:58:46.249175 kubelet[1982]: I0714 21:58:46.247377 1982 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" Jul 14 21:58:46.249213 env[1213]: time="2025-07-14T21:58:46.246423341Z" level=info msg="StopPodSandbox for \"27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314\"" Jul 14 21:58:46.249213 env[1213]: time="2025-07-14T21:58:46.247817205Z" level=info msg="StopPodSandbox for \"64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf\"" Jul 14 21:58:46.249450 kubelet[1982]: I0714 21:58:46.249401 1982 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" Jul 14 21:58:46.253221 env[1213]: time="2025-07-14T21:58:46.252708209Z" level=info msg="StopPodSandbox for \"e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d\"" Jul 14 21:58:46.265785 kubelet[1982]: I0714 21:58:46.265372 1982 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" Jul 14 21:58:46.265941 env[1213]: time="2025-07-14T21:58:46.265852555Z" level=info msg="StopPodSandbox for \"62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6\"" Jul 14 21:58:46.266665 kubelet[1982]: I0714 21:58:46.266328 1982 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" Jul 14 21:58:46.266838 env[1213]: time="2025-07-14T21:58:46.266779011Z" level=info msg="StopPodSandbox for \"065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7\"" Jul 14 21:58:46.298917 env[1213]: time="2025-07-14T21:58:46.298828643Z" level=error msg="StopPodSandbox for \"64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf\" failed" error="failed to destroy network for sandbox \"64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:46.299238 kubelet[1982]: E0714 21:58:46.299178 1982 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" Jul 14 21:58:46.299314 kubelet[1982]: E0714 21:58:46.299239 1982 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf"} Jul 14 21:58:46.299314 kubelet[1982]: E0714 21:58:46.299281 1982 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3c67d7b7-7d0d-4313-a8cc-1f1226c108af\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 21:58:46.299314 kubelet[1982]: E0714 21:58:46.299302 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3c67d7b7-7d0d-4313-a8cc-1f1226c108af\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5789c98db4-qmxz9" podUID="3c67d7b7-7d0d-4313-a8cc-1f1226c108af" Jul 14 21:58:46.303010 env[1213]: time="2025-07-14T21:58:46.302946754Z" level=error msg="StopPodSandbox for \"27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314\" failed" error="failed to destroy network for sandbox \"27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:46.303315 kubelet[1982]: E0714 21:58:46.303193 1982 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" Jul 14 21:58:46.303315 kubelet[1982]: E0714 21:58:46.303233 1982 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314"} Jul 14 21:58:46.303315 kubelet[1982]: E0714 21:58:46.303266 1982 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"2aa81a5c-ff84-4a72-ac44-ad3807eb290a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 21:58:46.303315 kubelet[1982]: E0714 21:58:46.303287 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"2aa81a5c-ff84-4a72-ac44-ad3807eb290a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-b5jln" podUID="2aa81a5c-ff84-4a72-ac44-ad3807eb290a" Jul 14 21:58:46.309782 env[1213]: time="2025-07-14T21:58:46.309726071Z" level=error msg="StopPodSandbox for \"e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d\" failed" error="failed to destroy network for sandbox \"e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:46.310113 kubelet[1982]: E0714 21:58:46.309986 1982 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" Jul 14 21:58:46.310113 kubelet[1982]: E0714 21:58:46.310037 1982 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d"} Jul 14 21:58:46.310113 kubelet[1982]: E0714 21:58:46.310067 1982 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"4411d551-971a-4801-a959-d2959312b095\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 21:58:46.310113 kubelet[1982]: E0714 21:58:46.310086 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"4411d551-971a-4801-a959-d2959312b095\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-hk8zv" podUID="4411d551-971a-4801-a959-d2959312b095" Jul 14 21:58:46.310300 env[1213]: time="2025-07-14T21:58:46.310013476Z" level=error msg="StopPodSandbox for \"065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7\" failed" error="failed to destroy network for sandbox \"065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:46.310329 kubelet[1982]: E0714 21:58:46.310151 1982 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" Jul 14 21:58:46.310329 kubelet[1982]: E0714 21:58:46.310190 1982 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7"} Jul 14 21:58:46.310329 kubelet[1982]: E0714 21:58:46.310216 1982 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a3bdbffd-037e-4027-9eb7-7ff772a71559\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 21:58:46.310329 kubelet[1982]: E0714 21:58:46.310235 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a3bdbffd-037e-4027-9eb7-7ff772a71559\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5789c98db4-s57m5" podUID="a3bdbffd-037e-4027-9eb7-7ff772a71559" Jul 14 21:58:46.323067 env[1213]: time="2025-07-14T21:58:46.322839857Z" level=error msg="StopPodSandbox for \"62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6\" failed" error="failed to destroy network for sandbox \"62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:46.323493 kubelet[1982]: E0714 21:58:46.323339 1982 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" Jul 14 21:58:46.323493 kubelet[1982]: E0714 21:58:46.323395 1982 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6"} Jul 14 21:58:46.323493 kubelet[1982]: E0714 21:58:46.323428 1982 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3c931f77-c334-4b3e-a241-dda45696bef8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 21:58:46.323493 kubelet[1982]: E0714 21:58:46.323460 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3c931f77-c334-4b3e-a241-dda45696bef8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-jtcvj" podUID="3c931f77-c334-4b3e-a241-dda45696bef8" Jul 14 21:58:46.357464 env[1213]: time="2025-07-14T21:58:46.357412133Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7b4995f5bb-js2nx,Uid:1df54ff6-b87e-44a8-b863-4594c2e303e2,Namespace:calico-system,Attempt:0,}" Jul 14 21:58:46.464288 env[1213]: time="2025-07-14T21:58:46.464153532Z" level=error msg="Failed to destroy network for sandbox \"c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:46.464528 env[1213]: time="2025-07-14T21:58:46.464494738Z" level=error msg="encountered an error cleaning up failed sandbox \"c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:46.464580 env[1213]: time="2025-07-14T21:58:46.464542779Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7b4995f5bb-js2nx,Uid:1df54ff6-b87e-44a8-b863-4594c2e303e2,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:46.465038 kubelet[1982]: E0714 21:58:46.464778 1982 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:46.465038 kubelet[1982]: E0714 21:58:46.464852 1982 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-7b4995f5bb-js2nx" Jul 14 21:58:46.465038 kubelet[1982]: E0714 21:58:46.464883 1982 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-7b4995f5bb-js2nx" Jul 14 21:58:46.465354 kubelet[1982]: E0714 21:58:46.464920 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-7b4995f5bb-js2nx_calico-system(1df54ff6-b87e-44a8-b863-4594c2e303e2)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-7b4995f5bb-js2nx_calico-system(1df54ff6-b87e-44a8-b863-4594c2e303e2)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-7b4995f5bb-js2nx" podUID="1df54ff6-b87e-44a8-b863-4594c2e303e2" Jul 14 21:58:46.684810 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7-shm.mount: Deactivated successfully. Jul 14 21:58:46.684930 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d-shm.mount: Deactivated successfully. Jul 14 21:58:46.684979 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314-shm.mount: Deactivated successfully. Jul 14 21:58:47.269605 kubelet[1982]: I0714 21:58:47.269570 1982 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" Jul 14 21:58:47.270201 env[1213]: time="2025-07-14T21:58:47.270156818Z" level=info msg="StopPodSandbox for \"c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4\"" Jul 14 21:58:47.293950 env[1213]: time="2025-07-14T21:58:47.293891383Z" level=error msg="StopPodSandbox for \"c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4\" failed" error="failed to destroy network for sandbox \"c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 21:58:47.294342 kubelet[1982]: E0714 21:58:47.294288 1982 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" Jul 14 21:58:47.294412 kubelet[1982]: E0714 21:58:47.294352 1982 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4"} Jul 14 21:58:47.294412 kubelet[1982]: E0714 21:58:47.294387 1982 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"1df54ff6-b87e-44a8-b863-4594c2e303e2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 21:58:47.294493 kubelet[1982]: E0714 21:58:47.294406 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"1df54ff6-b87e-44a8-b863-4594c2e303e2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-7b4995f5bb-js2nx" podUID="1df54ff6-b87e-44a8-b863-4594c2e303e2" Jul 14 21:58:49.838012 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount820403398.mount: Deactivated successfully. Jul 14 21:58:50.081929 env[1213]: time="2025-07-14T21:58:50.081855685Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:50.083459 env[1213]: time="2025-07-14T21:58:50.083422968Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:50.085309 env[1213]: time="2025-07-14T21:58:50.085274371Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:50.087001 env[1213]: time="2025-07-14T21:58:50.086972094Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:50.087582 env[1213]: time="2025-07-14T21:58:50.087550095Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9\"" Jul 14 21:58:50.106382 env[1213]: time="2025-07-14T21:58:50.106260165Z" level=info msg="CreateContainer within sandbox \"1cbbfe6f73704ec4e4b2a1ea0ddfe3e63f630117a1870b9ae2cfd69fa4770497\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 14 21:58:50.126886 env[1213]: time="2025-07-14T21:58:50.126816399Z" level=info msg="CreateContainer within sandbox \"1cbbfe6f73704ec4e4b2a1ea0ddfe3e63f630117a1870b9ae2cfd69fa4770497\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"bcfa4edebbfaedf7d4f72d10dd7a9b4c2e380727a0722a7b9575023a5d8720e3\"" Jul 14 21:58:50.129225 env[1213]: time="2025-07-14T21:58:50.129166123Z" level=info msg="StartContainer for \"bcfa4edebbfaedf7d4f72d10dd7a9b4c2e380727a0722a7b9575023a5d8720e3\"" Jul 14 21:58:50.149743 systemd[1]: Started cri-containerd-bcfa4edebbfaedf7d4f72d10dd7a9b4c2e380727a0722a7b9575023a5d8720e3.scope. Jul 14 21:58:50.199000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.201177 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 14 21:58:50.201244 kernel: audit: type=1400 audit(1752530330.199:981): avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.199000 audit[3185]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2485 pid=3185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:50.207038 kernel: audit: type=1300 audit(1752530330.199:981): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2485 pid=3185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:50.207104 kernel: audit: type=1327 audit(1752530330.199:981): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263666134656465626266616564663764346637326431306464376139 Jul 14 21:58:50.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263666134656465626266616564663764346637326431306464376139 Jul 14 21:58:50.199000 audit[3185]: AVC avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.212967 kernel: audit: type=1400 audit(1752530330.199:982): avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.213038 kernel: audit: type=1400 audit(1752530330.199:982): avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.199000 audit[3185]: AVC avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.199000 audit[3185]: AVC avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.217492 kernel: audit: type=1400 audit(1752530330.199:982): avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.217558 kernel: audit: type=1400 audit(1752530330.199:982): avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.199000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.199000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.222299 kernel: audit: type=1400 audit(1752530330.199:982): avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.199000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.224751 kernel: audit: type=1400 audit(1752530330.199:982): avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.224806 kernel: audit: type=1400 audit(1752530330.199:982): avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.199000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.199000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.199000 audit[3185]: AVC avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.199000 audit[3185]: AVC avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.199000 audit: BPF prog-id=133 op=LOAD Jul 14 21:58:50.199000 audit[3185]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2485 pid=3185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:50.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263666134656465626266616564663764346637326431306464376139 Jul 14 21:58:50.200000 audit[3185]: AVC avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.200000 audit[3185]: AVC avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.200000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.200000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.200000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.200000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.200000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.200000 audit[3185]: AVC avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.200000 audit[3185]: AVC avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.200000 audit: BPF prog-id=134 op=LOAD Jul 14 21:58:50.200000 audit[3185]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2485 pid=3185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:50.200000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263666134656465626266616564663764346637326431306464376139 Jul 14 21:58:50.202000 audit: BPF prog-id=134 op=UNLOAD Jul 14 21:58:50.202000 audit: BPF prog-id=133 op=UNLOAD Jul 14 21:58:50.202000 audit[3185]: AVC avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.202000 audit[3185]: AVC avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.202000 audit[3185]: AVC avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.202000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.202000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.202000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.202000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.202000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.202000 audit[3185]: AVC avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.202000 audit[3185]: AVC avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:50.202000 audit: BPF prog-id=135 op=LOAD Jul 14 21:58:50.202000 audit[3185]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2485 pid=3185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:50.202000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263666134656465626266616564663764346637326431306464376139 Jul 14 21:58:50.240024 env[1213]: time="2025-07-14T21:58:50.239966187Z" level=info msg="StartContainer for \"bcfa4edebbfaedf7d4f72d10dd7a9b4c2e380727a0722a7b9575023a5d8720e3\" returns successfully" Jul 14 21:58:50.455657 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 14 21:58:50.455794 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 14 21:58:50.584360 kubelet[1982]: I0714 21:58:50.584268 1982 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-wkkg5" podStartSLOduration=1.56745581 podStartE2EDuration="14.584249276s" podCreationTimestamp="2025-07-14 21:58:36 +0000 UTC" firstStartedPulling="2025-07-14 21:58:37.07181731 +0000 UTC m=+24.007615893" lastFinishedPulling="2025-07-14 21:58:50.088610776 +0000 UTC m=+37.024409359" observedRunningTime="2025-07-14 21:58:50.295588198 +0000 UTC m=+37.231386781" watchObservedRunningTime="2025-07-14 21:58:50.584249276 +0000 UTC m=+37.520047859" Jul 14 21:58:50.586412 env[1213]: time="2025-07-14T21:58:50.586363879Z" level=info msg="StopPodSandbox for \"c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4\"" Jul 14 21:58:50.835831 env[1213]: 2025-07-14 21:58:50.699 [INFO][3243] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" Jul 14 21:58:50.835831 env[1213]: 2025-07-14 21:58:50.699 [INFO][3243] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" iface="eth0" netns="/var/run/netns/cni-0911ff24-7b48-afd5-177e-dcc9b90e4560" Jul 14 21:58:50.835831 env[1213]: 2025-07-14 21:58:50.700 [INFO][3243] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" iface="eth0" netns="/var/run/netns/cni-0911ff24-7b48-afd5-177e-dcc9b90e4560" Jul 14 21:58:50.835831 env[1213]: 2025-07-14 21:58:50.703 [INFO][3243] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" iface="eth0" netns="/var/run/netns/cni-0911ff24-7b48-afd5-177e-dcc9b90e4560" Jul 14 21:58:50.835831 env[1213]: 2025-07-14 21:58:50.703 [INFO][3243] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" Jul 14 21:58:50.835831 env[1213]: 2025-07-14 21:58:50.703 [INFO][3243] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" Jul 14 21:58:50.835831 env[1213]: 2025-07-14 21:58:50.821 [INFO][3254] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" HandleID="k8s-pod-network.c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" Workload="localhost-k8s-whisker--7b4995f5bb--js2nx-eth0" Jul 14 21:58:50.835831 env[1213]: 2025-07-14 21:58:50.821 [INFO][3254] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:58:50.835831 env[1213]: 2025-07-14 21:58:50.821 [INFO][3254] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:58:50.835831 env[1213]: 2025-07-14 21:58:50.830 [WARNING][3254] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" HandleID="k8s-pod-network.c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" Workload="localhost-k8s-whisker--7b4995f5bb--js2nx-eth0" Jul 14 21:58:50.835831 env[1213]: 2025-07-14 21:58:50.830 [INFO][3254] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" HandleID="k8s-pod-network.c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" Workload="localhost-k8s-whisker--7b4995f5bb--js2nx-eth0" Jul 14 21:58:50.835831 env[1213]: 2025-07-14 21:58:50.831 [INFO][3254] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:58:50.835831 env[1213]: 2025-07-14 21:58:50.833 [INFO][3243] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" Jul 14 21:58:50.835831 env[1213]: time="2025-07-14T21:58:50.835457331Z" level=info msg="TearDown network for sandbox \"c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4\" successfully" Jul 14 21:58:50.835831 env[1213]: time="2025-07-14T21:58:50.835492931Z" level=info msg="StopPodSandbox for \"c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4\" returns successfully" Jul 14 21:58:50.839264 systemd[1]: run-netns-cni\x2d0911ff24\x2d7b48\x2dafd5\x2d177e\x2ddcc9b90e4560.mount: Deactivated successfully. Jul 14 21:58:50.918742 kubelet[1982]: I0714 21:58:50.918688 1982 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1df54ff6-b87e-44a8-b863-4594c2e303e2-whisker-ca-bundle\") pod \"1df54ff6-b87e-44a8-b863-4594c2e303e2\" (UID: \"1df54ff6-b87e-44a8-b863-4594c2e303e2\") " Jul 14 21:58:50.918951 kubelet[1982]: I0714 21:58:50.918764 1982 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-qnlkl\" (UniqueName: \"kubernetes.io/projected/1df54ff6-b87e-44a8-b863-4594c2e303e2-kube-api-access-qnlkl\") pod \"1df54ff6-b87e-44a8-b863-4594c2e303e2\" (UID: \"1df54ff6-b87e-44a8-b863-4594c2e303e2\") " Jul 14 21:58:50.918951 kubelet[1982]: I0714 21:58:50.918804 1982 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/1df54ff6-b87e-44a8-b863-4594c2e303e2-whisker-backend-key-pair\") pod \"1df54ff6-b87e-44a8-b863-4594c2e303e2\" (UID: \"1df54ff6-b87e-44a8-b863-4594c2e303e2\") " Jul 14 21:58:50.919483 kubelet[1982]: I0714 21:58:50.919367 1982 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/1df54ff6-b87e-44a8-b863-4594c2e303e2-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "1df54ff6-b87e-44a8-b863-4594c2e303e2" (UID: "1df54ff6-b87e-44a8-b863-4594c2e303e2"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Jul 14 21:58:50.924719 kubelet[1982]: I0714 21:58:50.924666 1982 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/1df54ff6-b87e-44a8-b863-4594c2e303e2-kube-api-access-qnlkl" (OuterVolumeSpecName: "kube-api-access-qnlkl") pod "1df54ff6-b87e-44a8-b863-4594c2e303e2" (UID: "1df54ff6-b87e-44a8-b863-4594c2e303e2"). InnerVolumeSpecName "kube-api-access-qnlkl". PluginName "kubernetes.io/projected", VolumeGidValue "" Jul 14 21:58:50.925806 kubelet[1982]: I0714 21:58:50.925760 1982 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/1df54ff6-b87e-44a8-b863-4594c2e303e2-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "1df54ff6-b87e-44a8-b863-4594c2e303e2" (UID: "1df54ff6-b87e-44a8-b863-4594c2e303e2"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGidValue "" Jul 14 21:58:50.926231 systemd[1]: var-lib-kubelet-pods-1df54ff6\x2db87e\x2d44a8\x2db863\x2d4594c2e303e2-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dqnlkl.mount: Deactivated successfully. Jul 14 21:58:50.928618 systemd[1]: var-lib-kubelet-pods-1df54ff6\x2db87e\x2d44a8\x2db863\x2d4594c2e303e2-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 14 21:58:51.019827 kubelet[1982]: I0714 21:58:51.019762 1982 reconciler_common.go:293] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/1df54ff6-b87e-44a8-b863-4594c2e303e2-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 14 21:58:51.019827 kubelet[1982]: I0714 21:58:51.019819 1982 reconciler_common.go:293] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1df54ff6-b87e-44a8-b863-4594c2e303e2-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 14 21:58:51.019827 kubelet[1982]: I0714 21:58:51.019832 1982 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-qnlkl\" (UniqueName: \"kubernetes.io/projected/1df54ff6-b87e-44a8-b863-4594c2e303e2-kube-api-access-qnlkl\") on node \"localhost\" DevicePath \"\"" Jul 14 21:58:51.155678 systemd[1]: Removed slice kubepods-besteffort-pod1df54ff6_b87e_44a8_b863_4594c2e303e2.slice. Jul 14 21:58:51.280703 kubelet[1982]: I0714 21:58:51.280673 1982 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 21:58:51.332375 systemd[1]: Created slice kubepods-besteffort-pod90ce1e6f_793d_4647_ab87_c7df2951a680.slice. Jul 14 21:58:51.421895 kubelet[1982]: I0714 21:58:51.421739 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/90ce1e6f-793d-4647-ab87-c7df2951a680-whisker-backend-key-pair\") pod \"whisker-86b849698-78jv4\" (UID: \"90ce1e6f-793d-4647-ab87-c7df2951a680\") " pod="calico-system/whisker-86b849698-78jv4" Jul 14 21:58:51.421895 kubelet[1982]: I0714 21:58:51.421794 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/90ce1e6f-793d-4647-ab87-c7df2951a680-whisker-ca-bundle\") pod \"whisker-86b849698-78jv4\" (UID: \"90ce1e6f-793d-4647-ab87-c7df2951a680\") " pod="calico-system/whisker-86b849698-78jv4" Jul 14 21:58:51.421895 kubelet[1982]: I0714 21:58:51.421827 1982 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-btv2d\" (UniqueName: \"kubernetes.io/projected/90ce1e6f-793d-4647-ab87-c7df2951a680-kube-api-access-btv2d\") pod \"whisker-86b849698-78jv4\" (UID: \"90ce1e6f-793d-4647-ab87-c7df2951a680\") " pod="calico-system/whisker-86b849698-78jv4" Jul 14 21:58:51.636028 env[1213]: time="2025-07-14T21:58:51.635971564Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-86b849698-78jv4,Uid:90ce1e6f-793d-4647-ab87-c7df2951a680,Namespace:calico-system,Attempt:0,}" Jul 14 21:58:51.787154 systemd-networkd[1047]: cali84c40aebfc8: Link UP Jul 14 21:58:51.788974 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 14 21:58:51.789074 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali84c40aebfc8: link becomes ready Jul 14 21:58:51.789569 systemd-networkd[1047]: cali84c40aebfc8: Gained carrier Jul 14 21:58:51.818188 env[1213]: 2025-07-14 21:58:51.700 [INFO][3276] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 14 21:58:51.818188 env[1213]: 2025-07-14 21:58:51.713 [INFO][3276] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--86b849698--78jv4-eth0 whisker-86b849698- calico-system 90ce1e6f-793d-4647-ab87-c7df2951a680 890 0 2025-07-14 21:58:51 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:86b849698 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-86b849698-78jv4 eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali84c40aebfc8 [] [] }} ContainerID="b5255f8ddd41d8f442e83e46e45bc4cf2ac5e938089d0c17b2abc4d322bf5da0" Namespace="calico-system" Pod="whisker-86b849698-78jv4" WorkloadEndpoint="localhost-k8s-whisker--86b849698--78jv4-" Jul 14 21:58:51.818188 env[1213]: 2025-07-14 21:58:51.713 [INFO][3276] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b5255f8ddd41d8f442e83e46e45bc4cf2ac5e938089d0c17b2abc4d322bf5da0" Namespace="calico-system" Pod="whisker-86b849698-78jv4" WorkloadEndpoint="localhost-k8s-whisker--86b849698--78jv4-eth0" Jul 14 21:58:51.818188 env[1213]: 2025-07-14 21:58:51.736 [INFO][3291] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b5255f8ddd41d8f442e83e46e45bc4cf2ac5e938089d0c17b2abc4d322bf5da0" HandleID="k8s-pod-network.b5255f8ddd41d8f442e83e46e45bc4cf2ac5e938089d0c17b2abc4d322bf5da0" Workload="localhost-k8s-whisker--86b849698--78jv4-eth0" Jul 14 21:58:51.818188 env[1213]: 2025-07-14 21:58:51.736 [INFO][3291] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b5255f8ddd41d8f442e83e46e45bc4cf2ac5e938089d0c17b2abc4d322bf5da0" HandleID="k8s-pod-network.b5255f8ddd41d8f442e83e46e45bc4cf2ac5e938089d0c17b2abc4d322bf5da0" Workload="localhost-k8s-whisker--86b849698--78jv4-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004c7b0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-86b849698-78jv4", "timestamp":"2025-07-14 21:58:51.736427567 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 21:58:51.818188 env[1213]: 2025-07-14 21:58:51.736 [INFO][3291] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:58:51.818188 env[1213]: 2025-07-14 21:58:51.737 [INFO][3291] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:58:51.818188 env[1213]: 2025-07-14 21:58:51.737 [INFO][3291] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 21:58:51.818188 env[1213]: 2025-07-14 21:58:51.746 [INFO][3291] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b5255f8ddd41d8f442e83e46e45bc4cf2ac5e938089d0c17b2abc4d322bf5da0" host="localhost" Jul 14 21:58:51.818188 env[1213]: 2025-07-14 21:58:51.755 [INFO][3291] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 21:58:51.818188 env[1213]: 2025-07-14 21:58:51.760 [INFO][3291] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 21:58:51.818188 env[1213]: 2025-07-14 21:58:51.762 [INFO][3291] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 21:58:51.818188 env[1213]: 2025-07-14 21:58:51.764 [INFO][3291] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 21:58:51.818188 env[1213]: 2025-07-14 21:58:51.764 [INFO][3291] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.b5255f8ddd41d8f442e83e46e45bc4cf2ac5e938089d0c17b2abc4d322bf5da0" host="localhost" Jul 14 21:58:51.818188 env[1213]: 2025-07-14 21:58:51.765 [INFO][3291] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b5255f8ddd41d8f442e83e46e45bc4cf2ac5e938089d0c17b2abc4d322bf5da0 Jul 14 21:58:51.818188 env[1213]: 2025-07-14 21:58:51.769 [INFO][3291] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.b5255f8ddd41d8f442e83e46e45bc4cf2ac5e938089d0c17b2abc4d322bf5da0" host="localhost" Jul 14 21:58:51.818188 env[1213]: 2025-07-14 21:58:51.774 [INFO][3291] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.b5255f8ddd41d8f442e83e46e45bc4cf2ac5e938089d0c17b2abc4d322bf5da0" host="localhost" Jul 14 21:58:51.818188 env[1213]: 2025-07-14 21:58:51.774 [INFO][3291] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.b5255f8ddd41d8f442e83e46e45bc4cf2ac5e938089d0c17b2abc4d322bf5da0" host="localhost" Jul 14 21:58:51.818188 env[1213]: 2025-07-14 21:58:51.774 [INFO][3291] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:58:51.818188 env[1213]: 2025-07-14 21:58:51.774 [INFO][3291] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="b5255f8ddd41d8f442e83e46e45bc4cf2ac5e938089d0c17b2abc4d322bf5da0" HandleID="k8s-pod-network.b5255f8ddd41d8f442e83e46e45bc4cf2ac5e938089d0c17b2abc4d322bf5da0" Workload="localhost-k8s-whisker--86b849698--78jv4-eth0" Jul 14 21:58:51.818765 env[1213]: 2025-07-14 21:58:51.776 [INFO][3276] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b5255f8ddd41d8f442e83e46e45bc4cf2ac5e938089d0c17b2abc4d322bf5da0" Namespace="calico-system" Pod="whisker-86b849698-78jv4" WorkloadEndpoint="localhost-k8s-whisker--86b849698--78jv4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--86b849698--78jv4-eth0", GenerateName:"whisker-86b849698-", Namespace:"calico-system", SelfLink:"", UID:"90ce1e6f-793d-4647-ab87-c7df2951a680", ResourceVersion:"890", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"86b849698", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-86b849698-78jv4", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali84c40aebfc8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:58:51.818765 env[1213]: 2025-07-14 21:58:51.776 [INFO][3276] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="b5255f8ddd41d8f442e83e46e45bc4cf2ac5e938089d0c17b2abc4d322bf5da0" Namespace="calico-system" Pod="whisker-86b849698-78jv4" WorkloadEndpoint="localhost-k8s-whisker--86b849698--78jv4-eth0" Jul 14 21:58:51.818765 env[1213]: 2025-07-14 21:58:51.776 [INFO][3276] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali84c40aebfc8 ContainerID="b5255f8ddd41d8f442e83e46e45bc4cf2ac5e938089d0c17b2abc4d322bf5da0" Namespace="calico-system" Pod="whisker-86b849698-78jv4" WorkloadEndpoint="localhost-k8s-whisker--86b849698--78jv4-eth0" Jul 14 21:58:51.818765 env[1213]: 2025-07-14 21:58:51.789 [INFO][3276] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b5255f8ddd41d8f442e83e46e45bc4cf2ac5e938089d0c17b2abc4d322bf5da0" Namespace="calico-system" Pod="whisker-86b849698-78jv4" WorkloadEndpoint="localhost-k8s-whisker--86b849698--78jv4-eth0" Jul 14 21:58:51.818765 env[1213]: 2025-07-14 21:58:51.790 [INFO][3276] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b5255f8ddd41d8f442e83e46e45bc4cf2ac5e938089d0c17b2abc4d322bf5da0" Namespace="calico-system" Pod="whisker-86b849698-78jv4" WorkloadEndpoint="localhost-k8s-whisker--86b849698--78jv4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--86b849698--78jv4-eth0", GenerateName:"whisker-86b849698-", Namespace:"calico-system", SelfLink:"", UID:"90ce1e6f-793d-4647-ab87-c7df2951a680", ResourceVersion:"890", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"86b849698", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b5255f8ddd41d8f442e83e46e45bc4cf2ac5e938089d0c17b2abc4d322bf5da0", Pod:"whisker-86b849698-78jv4", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali84c40aebfc8", MAC:"2a:20:15:82:72:52", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:58:51.818765 env[1213]: 2025-07-14 21:58:51.815 [INFO][3276] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b5255f8ddd41d8f442e83e46e45bc4cf2ac5e938089d0c17b2abc4d322bf5da0" Namespace="calico-system" Pod="whisker-86b849698-78jv4" WorkloadEndpoint="localhost-k8s-whisker--86b849698--78jv4-eth0" Jul 14 21:58:51.824000 audit[3363]: AVC avc: denied { write } for pid=3363 comm="tee" name="fd" dev="proc" ino=20042 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 21:58:51.824000 audit[3363]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffee6da7e3 a2=241 a3=1b6 items=1 ppid=3319 pid=3363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:51.824000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 14 21:58:51.824000 audit: PATH item=0 name="/dev/fd/63" inode=19144 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 21:58:51.824000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 21:58:51.832000 audit[3383]: AVC avc: denied { write } for pid=3383 comm="tee" name="fd" dev="proc" ino=20052 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 21:58:51.832000 audit[3383]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc5eb07e1 a2=241 a3=1b6 items=1 ppid=3314 pid=3383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:51.832000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 14 21:58:51.832000 audit: PATH item=0 name="/dev/fd/63" inode=18022 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 21:58:51.832000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 21:58:51.841967 env[1213]: time="2025-07-14T21:58:51.840169976Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 21:58:51.841967 env[1213]: time="2025-07-14T21:58:51.840217976Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 21:58:51.841967 env[1213]: time="2025-07-14T21:58:51.840228056Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 21:58:51.841967 env[1213]: time="2025-07-14T21:58:51.841499899Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b5255f8ddd41d8f442e83e46e45bc4cf2ac5e938089d0c17b2abc4d322bf5da0 pid=3381 runtime=io.containerd.runc.v2 Jul 14 21:58:51.855000 audit[3406]: AVC avc: denied { write } for pid=3406 comm="tee" name="fd" dev="proc" ino=19195 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 21:58:51.855000 audit[3406]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffed88f7d1 a2=241 a3=1b6 items=1 ppid=3310 pid=3406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:51.855000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 14 21:58:51.855000 audit: PATH item=0 name="/dev/fd/63" inode=19159 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 21:58:51.855000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 21:58:51.860341 systemd[1]: run-containerd-runc-k8s.io-b5255f8ddd41d8f442e83e46e45bc4cf2ac5e938089d0c17b2abc4d322bf5da0-runc.vZ85sL.mount: Deactivated successfully. Jul 14 21:58:51.861000 audit[3394]: AVC avc: denied { write } for pid=3394 comm="tee" name="fd" dev="proc" ino=20511 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 21:58:51.861000 audit[3394]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd54967e1 a2=241 a3=1b6 items=1 ppid=3313 pid=3394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:51.861000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 14 21:58:51.861000 audit: PATH item=0 name="/dev/fd/63" inode=19153 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 21:58:51.861000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 21:58:51.866000 audit[3378]: AVC avc: denied { write } for pid=3378 comm="tee" name="fd" dev="proc" ino=20517 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 21:58:51.866000 audit[3378]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc840d7e2 a2=241 a3=1b6 items=1 ppid=3320 pid=3378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:51.866000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 14 21:58:51.866000 audit: PATH item=0 name="/dev/fd/63" inode=19147 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 21:58:51.866000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 21:58:51.866000 audit[3413]: AVC avc: denied { write } for pid=3413 comm="tee" name="fd" dev="proc" ino=20521 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 21:58:51.866000 audit[3413]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffcb9b17d2 a2=241 a3=1b6 items=1 ppid=3317 pid=3413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:51.866000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 14 21:58:51.866000 audit: PATH item=0 name="/dev/fd/63" inode=20508 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 21:58:51.866000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 21:58:51.863651 systemd[1]: Started cri-containerd-b5255f8ddd41d8f442e83e46e45bc4cf2ac5e938089d0c17b2abc4d322bf5da0.scope. Jul 14 21:58:51.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.888000 audit: BPF prog-id=136 op=LOAD Jul 14 21:58:51.890000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.890000 audit[3404]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3381 pid=3404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:51.890000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235323535663864646434316438663434326538336534366534356263 Jul 14 21:58:51.890000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.890000 audit[3404]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3381 pid=3404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:51.890000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235323535663864646434316438663434326538336534366534356263 Jul 14 21:58:51.890000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.890000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.890000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.890000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.890000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.890000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.890000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.890000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.890000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.890000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.890000 audit: BPF prog-id=137 op=LOAD Jul 14 21:58:51.890000 audit[3404]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3381 pid=3404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:51.890000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235323535663864646434316438663434326538336534366534356263 Jul 14 21:58:51.891000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.891000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.891000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.891000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.891000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.891000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.891000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.891000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.891000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.891000 audit: BPF prog-id=138 op=LOAD Jul 14 21:58:51.891000 audit[3404]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3381 pid=3404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:51.891000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235323535663864646434316438663434326538336534366534356263 Jul 14 21:58:51.891000 audit: BPF prog-id=138 op=UNLOAD Jul 14 21:58:51.891000 audit: BPF prog-id=137 op=UNLOAD Jul 14 21:58:51.891000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.891000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.891000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.891000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.891000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.891000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.891000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.891000 audit[3404]: AVC avc: denied { perfmon } for pid=3404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.891000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.891000 audit[3404]: AVC avc: denied { bpf } for pid=3404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:51.891000 audit: BPF prog-id=139 op=LOAD Jul 14 21:58:51.891000 audit[3404]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3381 pid=3404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:51.891000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235323535663864646434316438663434326538336534366534356263 Jul 14 21:58:51.894000 audit[3424]: AVC avc: denied { write } for pid=3424 comm="tee" name="fd" dev="proc" ino=18036 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 21:58:51.894000 audit[3424]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc734c7e1 a2=241 a3=1b6 items=1 ppid=3323 pid=3424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:51.894000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 14 21:58:51.895923 systemd-resolved[1155]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 21:58:51.894000 audit: PATH item=0 name="/dev/fd/63" inode=18032 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 21:58:51.894000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 21:58:51.927555 env[1213]: time="2025-07-14T21:58:51.927511952Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-86b849698-78jv4,Uid:90ce1e6f-793d-4647-ab87-c7df2951a680,Namespace:calico-system,Attempt:0,} returns sandbox id \"b5255f8ddd41d8f442e83e46e45bc4cf2ac5e938089d0c17b2abc4d322bf5da0\"" Jul 14 21:58:51.929031 env[1213]: time="2025-07-14T21:58:51.928999475Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 14 21:58:53.151616 kubelet[1982]: I0714 21:58:53.151563 1982 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="1df54ff6-b87e-44a8-b863-4594c2e303e2" path="/var/lib/kubelet/pods/1df54ff6-b87e-44a8-b863-4594c2e303e2/volumes" Jul 14 21:58:53.272166 env[1213]: time="2025-07-14T21:58:53.272074006Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:53.277294 env[1213]: time="2025-07-14T21:58:53.277254540Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:53.278668 env[1213]: time="2025-07-14T21:58:53.278610984Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:53.280226 env[1213]: time="2025-07-14T21:58:53.280193108Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:53.281287 env[1213]: time="2025-07-14T21:58:53.280841070Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817\"" Jul 14 21:58:53.284535 env[1213]: time="2025-07-14T21:58:53.284495720Z" level=info msg="CreateContainer within sandbox \"b5255f8ddd41d8f442e83e46e45bc4cf2ac5e938089d0c17b2abc4d322bf5da0\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 14 21:58:53.296068 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount633885643.mount: Deactivated successfully. Jul 14 21:58:53.301223 env[1213]: time="2025-07-14T21:58:53.301178285Z" level=info msg="CreateContainer within sandbox \"b5255f8ddd41d8f442e83e46e45bc4cf2ac5e938089d0c17b2abc4d322bf5da0\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"89ba483614c0a8a4c6b1ef29f1dbdea69363a225b843d3185f65362b3e282b31\"" Jul 14 21:58:53.303275 env[1213]: time="2025-07-14T21:58:53.301976847Z" level=info msg="StartContainer for \"89ba483614c0a8a4c6b1ef29f1dbdea69363a225b843d3185f65362b3e282b31\"" Jul 14 21:58:53.322271 systemd[1]: Started cri-containerd-89ba483614c0a8a4c6b1ef29f1dbdea69363a225b843d3185f65362b3e282b31.scope. Jul 14 21:58:53.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.385000 audit: BPF prog-id=140 op=LOAD Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3381 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:53.386000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839626134383336313463306138613463366231656632396631646264 Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3381 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:53.386000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839626134383336313463306138613463366231656632396631646264 Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit: BPF prog-id=141 op=LOAD Jul 14 21:58:53.386000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3381 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:53.386000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839626134383336313463306138613463366231656632396631646264 Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit: BPF prog-id=142 op=LOAD Jul 14 21:58:53.386000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3381 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:53.386000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839626134383336313463306138613463366231656632396631646264 Jul 14 21:58:53.386000 audit: BPF prog-id=142 op=UNLOAD Jul 14 21:58:53.386000 audit: BPF prog-id=141 op=UNLOAD Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:53.386000 audit: BPF prog-id=143 op=LOAD Jul 14 21:58:53.386000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3381 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:53.386000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839626134383336313463306138613463366231656632396631646264 Jul 14 21:58:53.404809 env[1213]: time="2025-07-14T21:58:53.404710526Z" level=info msg="StartContainer for \"89ba483614c0a8a4c6b1ef29f1dbdea69363a225b843d3185f65362b3e282b31\" returns successfully" Jul 14 21:58:53.408476 env[1213]: time="2025-07-14T21:58:53.408349376Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 14 21:58:53.424000 audit[3491]: AVC avc: denied { search } for pid=3491 comm="nginx" name="crypto" dev="proc" ino=20657 scontext=system_u:system_r:svirt_lxc_net_t:s0:c28,c760 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 14 21:58:53.424000 audit[3491]: SYSCALL arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffff8627d958 a2=0 a3=0 items=0 ppid=3381 pid=3491 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c28,c760 key=(null) Jul 14 21:58:53.424000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 14 21:58:53.769008 systemd-networkd[1047]: cali84c40aebfc8: Gained IPv6LL Jul 14 21:58:54.893560 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1367364670.mount: Deactivated successfully. Jul 14 21:58:54.927318 env[1213]: time="2025-07-14T21:58:54.927242883Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:54.928627 env[1213]: time="2025-07-14T21:58:54.928589647Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:54.929943 env[1213]: time="2025-07-14T21:58:54.929908411Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:54.931295 env[1213]: time="2025-07-14T21:58:54.931260415Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:54.932655 env[1213]: time="2025-07-14T21:58:54.932611059Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4\"" Jul 14 21:58:54.936051 env[1213]: time="2025-07-14T21:58:54.936013469Z" level=info msg="CreateContainer within sandbox \"b5255f8ddd41d8f442e83e46e45bc4cf2ac5e938089d0c17b2abc4d322bf5da0\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 14 21:58:54.947093 env[1213]: time="2025-07-14T21:58:54.947032583Z" level=info msg="CreateContainer within sandbox \"b5255f8ddd41d8f442e83e46e45bc4cf2ac5e938089d0c17b2abc4d322bf5da0\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"528b38a6a41fb90ef959382ad26d9922886462df101da8a909719fc1f6ac488b\"" Jul 14 21:58:54.949163 env[1213]: time="2025-07-14T21:58:54.947913186Z" level=info msg="StartContainer for \"528b38a6a41fb90ef959382ad26d9922886462df101da8a909719fc1f6ac488b\"" Jul 14 21:58:54.969684 systemd[1]: Started cri-containerd-528b38a6a41fb90ef959382ad26d9922886462df101da8a909719fc1f6ac488b.scope. Jul 14 21:58:55.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit: BPF prog-id=144 op=LOAD Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[3546]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3381 pid=3546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:55.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532386233386136613431666239306566393539333832616432366439 Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[3546]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3381 pid=3546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:55.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532386233386136613431666239306566393539333832616432366439 Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit: BPF prog-id=145 op=LOAD Jul 14 21:58:55.003000 audit[3546]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3381 pid=3546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:55.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532386233386136613431666239306566393539333832616432366439 Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit: BPF prog-id=146 op=LOAD Jul 14 21:58:55.003000 audit[3546]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3381 pid=3546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:55.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532386233386136613431666239306566393539333832616432366439 Jul 14 21:58:55.003000 audit: BPF prog-id=146 op=UNLOAD Jul 14 21:58:55.003000 audit: BPF prog-id=145 op=UNLOAD Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:55.003000 audit: BPF prog-id=147 op=LOAD Jul 14 21:58:55.003000 audit[3546]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3381 pid=3546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:55.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532386233386136613431666239306566393539333832616432366439 Jul 14 21:58:55.028385 env[1213]: time="2025-07-14T21:58:55.028334319Z" level=info msg="StartContainer for \"528b38a6a41fb90ef959382ad26d9922886462df101da8a909719fc1f6ac488b\" returns successfully" Jul 14 21:58:55.303125 kubelet[1982]: I0714 21:58:55.303054 1982 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-86b849698-78jv4" podStartSLOduration=1.298534937 podStartE2EDuration="4.303035043s" podCreationTimestamp="2025-07-14 21:58:51 +0000 UTC" firstStartedPulling="2025-07-14 21:58:51.928759555 +0000 UTC m=+38.864558138" lastFinishedPulling="2025-07-14 21:58:54.933259661 +0000 UTC m=+41.869058244" observedRunningTime="2025-07-14 21:58:55.302724082 +0000 UTC m=+42.238522665" watchObservedRunningTime="2025-07-14 21:58:55.303035043 +0000 UTC m=+42.238833626" Jul 14 21:58:55.345000 audit[3598]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=3598 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:58:55.347240 kernel: kauditd_printk_skb: 242 callbacks suppressed Jul 14 21:58:55.347287 kernel: audit: type=1325 audit(1752530335.345:1049): table=filter:99 family=2 entries=21 op=nft_register_rule pid=3598 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:58:55.345000 audit[3598]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffe2634bf0 a2=0 a3=1 items=0 ppid=2082 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:55.352852 kernel: audit: type=1300 audit(1752530335.345:1049): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffe2634bf0 a2=0 a3=1 items=0 ppid=2082 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:55.352931 kernel: audit: type=1327 audit(1752530335.345:1049): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:58:55.345000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:58:55.359000 audit[3598]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=3598 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:58:55.359000 audit[3598]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffe2634bf0 a2=0 a3=1 items=0 ppid=2082 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:55.366084 kernel: audit: type=1325 audit(1752530335.359:1050): table=nat:100 family=2 entries=19 op=nft_register_chain pid=3598 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:58:55.366143 kernel: audit: type=1300 audit(1752530335.359:1050): arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffe2634bf0 a2=0 a3=1 items=0 ppid=2082 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:55.366175 kernel: audit: type=1327 audit(1752530335.359:1050): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:58:55.359000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:58:57.150546 env[1213]: time="2025-07-14T21:58:57.150481462Z" level=info msg="StopPodSandbox for \"a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50\"" Jul 14 21:58:57.241813 env[1213]: 2025-07-14 21:58:57.198 [INFO][3638] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" Jul 14 21:58:57.241813 env[1213]: 2025-07-14 21:58:57.198 [INFO][3638] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" iface="eth0" netns="/var/run/netns/cni-4ba3755d-9119-e9bd-7e28-d90ca356eb4c" Jul 14 21:58:57.241813 env[1213]: 2025-07-14 21:58:57.198 [INFO][3638] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" iface="eth0" netns="/var/run/netns/cni-4ba3755d-9119-e9bd-7e28-d90ca356eb4c" Jul 14 21:58:57.241813 env[1213]: 2025-07-14 21:58:57.198 [INFO][3638] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" iface="eth0" netns="/var/run/netns/cni-4ba3755d-9119-e9bd-7e28-d90ca356eb4c" Jul 14 21:58:57.241813 env[1213]: 2025-07-14 21:58:57.198 [INFO][3638] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" Jul 14 21:58:57.241813 env[1213]: 2025-07-14 21:58:57.198 [INFO][3638] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" Jul 14 21:58:57.241813 env[1213]: 2025-07-14 21:58:57.228 [INFO][3646] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" HandleID="k8s-pod-network.a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" Workload="localhost-k8s-calico--kube--controllers--8c8858955--jvl7q-eth0" Jul 14 21:58:57.241813 env[1213]: 2025-07-14 21:58:57.228 [INFO][3646] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:58:57.241813 env[1213]: 2025-07-14 21:58:57.228 [INFO][3646] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:58:57.241813 env[1213]: 2025-07-14 21:58:57.236 [WARNING][3646] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" HandleID="k8s-pod-network.a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" Workload="localhost-k8s-calico--kube--controllers--8c8858955--jvl7q-eth0" Jul 14 21:58:57.241813 env[1213]: 2025-07-14 21:58:57.236 [INFO][3646] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" HandleID="k8s-pod-network.a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" Workload="localhost-k8s-calico--kube--controllers--8c8858955--jvl7q-eth0" Jul 14 21:58:57.241813 env[1213]: 2025-07-14 21:58:57.238 [INFO][3646] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:58:57.241813 env[1213]: 2025-07-14 21:58:57.240 [INFO][3638] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" Jul 14 21:58:57.242344 env[1213]: time="2025-07-14T21:58:57.241982426Z" level=info msg="TearDown network for sandbox \"a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50\" successfully" Jul 14 21:58:57.242344 env[1213]: time="2025-07-14T21:58:57.242031786Z" level=info msg="StopPodSandbox for \"a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50\" returns successfully" Jul 14 21:58:57.242756 env[1213]: time="2025-07-14T21:58:57.242673388Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-8c8858955-jvl7q,Uid:d21ca187-3e16-486f-8f0c-46d4535071eb,Namespace:calico-system,Attempt:1,}" Jul 14 21:58:57.244129 systemd[1]: run-netns-cni\x2d4ba3755d\x2d9119\x2de9bd\x2d7e28\x2dd90ca356eb4c.mount: Deactivated successfully. Jul 14 21:58:57.480185 systemd-networkd[1047]: cali45e64a5e75d: Link UP Jul 14 21:58:57.484044 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 14 21:58:57.484137 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali45e64a5e75d: link becomes ready Jul 14 21:58:57.482216 systemd-networkd[1047]: cali45e64a5e75d: Gained carrier Jul 14 21:58:57.499462 env[1213]: 2025-07-14 21:58:57.278 [INFO][3653] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 14 21:58:57.499462 env[1213]: 2025-07-14 21:58:57.295 [INFO][3653] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--8c8858955--jvl7q-eth0 calico-kube-controllers-8c8858955- calico-system d21ca187-3e16-486f-8f0c-46d4535071eb 921 0 2025-07-14 21:58:37 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:8c8858955 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-8c8858955-jvl7q eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali45e64a5e75d [] [] }} ContainerID="4b6bf74947a28606443163809a94262d111150075aa86963328d7e3e7b372fd5" Namespace="calico-system" Pod="calico-kube-controllers-8c8858955-jvl7q" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--8c8858955--jvl7q-" Jul 14 21:58:57.499462 env[1213]: 2025-07-14 21:58:57.296 [INFO][3653] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="4b6bf74947a28606443163809a94262d111150075aa86963328d7e3e7b372fd5" Namespace="calico-system" Pod="calico-kube-controllers-8c8858955-jvl7q" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--8c8858955--jvl7q-eth0" Jul 14 21:58:57.499462 env[1213]: 2025-07-14 21:58:57.322 [INFO][3681] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4b6bf74947a28606443163809a94262d111150075aa86963328d7e3e7b372fd5" HandleID="k8s-pod-network.4b6bf74947a28606443163809a94262d111150075aa86963328d7e3e7b372fd5" Workload="localhost-k8s-calico--kube--controllers--8c8858955--jvl7q-eth0" Jul 14 21:58:57.499462 env[1213]: 2025-07-14 21:58:57.322 [INFO][3681] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="4b6bf74947a28606443163809a94262d111150075aa86963328d7e3e7b372fd5" HandleID="k8s-pod-network.4b6bf74947a28606443163809a94262d111150075aa86963328d7e3e7b372fd5" Workload="localhost-k8s-calico--kube--controllers--8c8858955--jvl7q-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000343010), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-8c8858955-jvl7q", "timestamp":"2025-07-14 21:58:57.322248385 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 21:58:57.499462 env[1213]: 2025-07-14 21:58:57.322 [INFO][3681] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:58:57.499462 env[1213]: 2025-07-14 21:58:57.322 [INFO][3681] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:58:57.499462 env[1213]: 2025-07-14 21:58:57.322 [INFO][3681] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 21:58:57.499462 env[1213]: 2025-07-14 21:58:57.335 [INFO][3681] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.4b6bf74947a28606443163809a94262d111150075aa86963328d7e3e7b372fd5" host="localhost" Jul 14 21:58:57.499462 env[1213]: 2025-07-14 21:58:57.341 [INFO][3681] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 21:58:57.499462 env[1213]: 2025-07-14 21:58:57.353 [INFO][3681] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 21:58:57.499462 env[1213]: 2025-07-14 21:58:57.356 [INFO][3681] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 21:58:57.499462 env[1213]: 2025-07-14 21:58:57.358 [INFO][3681] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 21:58:57.499462 env[1213]: 2025-07-14 21:58:57.358 [INFO][3681] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.4b6bf74947a28606443163809a94262d111150075aa86963328d7e3e7b372fd5" host="localhost" Jul 14 21:58:57.499462 env[1213]: 2025-07-14 21:58:57.360 [INFO][3681] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.4b6bf74947a28606443163809a94262d111150075aa86963328d7e3e7b372fd5 Jul 14 21:58:57.499462 env[1213]: 2025-07-14 21:58:57.392 [INFO][3681] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.4b6bf74947a28606443163809a94262d111150075aa86963328d7e3e7b372fd5" host="localhost" Jul 14 21:58:57.499462 env[1213]: 2025-07-14 21:58:57.475 [INFO][3681] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.4b6bf74947a28606443163809a94262d111150075aa86963328d7e3e7b372fd5" host="localhost" Jul 14 21:58:57.499462 env[1213]: 2025-07-14 21:58:57.476 [INFO][3681] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.4b6bf74947a28606443163809a94262d111150075aa86963328d7e3e7b372fd5" host="localhost" Jul 14 21:58:57.499462 env[1213]: 2025-07-14 21:58:57.476 [INFO][3681] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:58:57.499462 env[1213]: 2025-07-14 21:58:57.476 [INFO][3681] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="4b6bf74947a28606443163809a94262d111150075aa86963328d7e3e7b372fd5" HandleID="k8s-pod-network.4b6bf74947a28606443163809a94262d111150075aa86963328d7e3e7b372fd5" Workload="localhost-k8s-calico--kube--controllers--8c8858955--jvl7q-eth0" Jul 14 21:58:57.500053 env[1213]: 2025-07-14 21:58:57.478 [INFO][3653] cni-plugin/k8s.go 418: Populated endpoint ContainerID="4b6bf74947a28606443163809a94262d111150075aa86963328d7e3e7b372fd5" Namespace="calico-system" Pod="calico-kube-controllers-8c8858955-jvl7q" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--8c8858955--jvl7q-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--8c8858955--jvl7q-eth0", GenerateName:"calico-kube-controllers-8c8858955-", Namespace:"calico-system", SelfLink:"", UID:"d21ca187-3e16-486f-8f0c-46d4535071eb", ResourceVersion:"921", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"8c8858955", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-8c8858955-jvl7q", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali45e64a5e75d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:58:57.500053 env[1213]: 2025-07-14 21:58:57.478 [INFO][3653] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="4b6bf74947a28606443163809a94262d111150075aa86963328d7e3e7b372fd5" Namespace="calico-system" Pod="calico-kube-controllers-8c8858955-jvl7q" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--8c8858955--jvl7q-eth0" Jul 14 21:58:57.500053 env[1213]: 2025-07-14 21:58:57.478 [INFO][3653] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali45e64a5e75d ContainerID="4b6bf74947a28606443163809a94262d111150075aa86963328d7e3e7b372fd5" Namespace="calico-system" Pod="calico-kube-controllers-8c8858955-jvl7q" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--8c8858955--jvl7q-eth0" Jul 14 21:58:57.500053 env[1213]: 2025-07-14 21:58:57.482 [INFO][3653] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="4b6bf74947a28606443163809a94262d111150075aa86963328d7e3e7b372fd5" Namespace="calico-system" Pod="calico-kube-controllers-8c8858955-jvl7q" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--8c8858955--jvl7q-eth0" Jul 14 21:58:57.500053 env[1213]: 2025-07-14 21:58:57.484 [INFO][3653] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="4b6bf74947a28606443163809a94262d111150075aa86963328d7e3e7b372fd5" Namespace="calico-system" Pod="calico-kube-controllers-8c8858955-jvl7q" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--8c8858955--jvl7q-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--8c8858955--jvl7q-eth0", GenerateName:"calico-kube-controllers-8c8858955-", Namespace:"calico-system", SelfLink:"", UID:"d21ca187-3e16-486f-8f0c-46d4535071eb", ResourceVersion:"921", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"8c8858955", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4b6bf74947a28606443163809a94262d111150075aa86963328d7e3e7b372fd5", Pod:"calico-kube-controllers-8c8858955-jvl7q", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali45e64a5e75d", MAC:"e2:33:06:e3:86:c1", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:58:57.500053 env[1213]: 2025-07-14 21:58:57.497 [INFO][3653] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="4b6bf74947a28606443163809a94262d111150075aa86963328d7e3e7b372fd5" Namespace="calico-system" Pod="calico-kube-controllers-8c8858955-jvl7q" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--8c8858955--jvl7q-eth0" Jul 14 21:58:57.509339 env[1213]: time="2025-07-14T21:58:57.509265729Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 21:58:57.509339 env[1213]: time="2025-07-14T21:58:57.509306489Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 21:58:57.509339 env[1213]: time="2025-07-14T21:58:57.509331209Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 21:58:57.509517 env[1213]: time="2025-07-14T21:58:57.509471049Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4b6bf74947a28606443163809a94262d111150075aa86963328d7e3e7b372fd5 pid=3716 runtime=io.containerd.runc.v2 Jul 14 21:58:57.522091 systemd[1]: Started cri-containerd-4b6bf74947a28606443163809a94262d111150075aa86963328d7e3e7b372fd5.scope. Jul 14 21:58:57.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.576678 kernel: audit: type=1400 audit(1752530337.570:1051): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.576735 kernel: audit: type=1400 audit(1752530337.570:1052): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.576798 kernel: audit: type=1400 audit(1752530337.570:1053): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.581430 kernel: audit: type=1400 audit(1752530337.570:1054): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.573000 audit: BPF prog-id=148 op=LOAD Jul 14 21:58:57.578000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.578000 audit[3725]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3716 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:57.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462366266373439343761323836303634343331363338303961393432 Jul 14 21:58:57.578000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.578000 audit[3725]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3716 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:57.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462366266373439343761323836303634343331363338303961393432 Jul 14 21:58:57.578000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.578000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.578000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.578000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.578000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.578000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.578000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.578000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.578000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.578000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.578000 audit: BPF prog-id=149 op=LOAD Jul 14 21:58:57.578000 audit[3725]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3716 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:57.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462366266373439343761323836303634343331363338303961393432 Jul 14 21:58:57.580000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.580000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.580000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.580000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.580000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.580000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.580000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.580000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.580000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.580000 audit: BPF prog-id=150 op=LOAD Jul 14 21:58:57.580000 audit[3725]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3716 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:57.580000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462366266373439343761323836303634343331363338303961393432 Jul 14 21:58:57.580000 audit: BPF prog-id=150 op=UNLOAD Jul 14 21:58:57.580000 audit: BPF prog-id=149 op=UNLOAD Jul 14 21:58:57.580000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.580000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.580000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.580000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.580000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.580000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.580000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.580000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.580000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.580000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:57.580000 audit: BPF prog-id=151 op=LOAD Jul 14 21:58:57.580000 audit[3725]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3716 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:57.580000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462366266373439343761323836303634343331363338303961393432 Jul 14 21:58:57.582397 systemd-resolved[1155]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 21:58:57.597967 env[1213]: time="2025-07-14T21:58:57.597931241Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-8c8858955-jvl7q,Uid:d21ca187-3e16-486f-8f0c-46d4535071eb,Namespace:calico-system,Attempt:1,} returns sandbox id \"4b6bf74947a28606443163809a94262d111150075aa86963328d7e3e7b372fd5\"" Jul 14 21:58:57.601431 env[1213]: time="2025-07-14T21:58:57.601404575Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 14 21:58:58.150202 env[1213]: time="2025-07-14T21:58:58.150158161Z" level=info msg="StopPodSandbox for \"64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf\"" Jul 14 21:58:58.225834 env[1213]: 2025-07-14 21:58:58.192 [INFO][3761] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" Jul 14 21:58:58.225834 env[1213]: 2025-07-14 21:58:58.192 [INFO][3761] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" iface="eth0" netns="/var/run/netns/cni-f41e23a2-cec4-cb70-a55a-8b6383db0d9c" Jul 14 21:58:58.225834 env[1213]: 2025-07-14 21:58:58.193 [INFO][3761] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" iface="eth0" netns="/var/run/netns/cni-f41e23a2-cec4-cb70-a55a-8b6383db0d9c" Jul 14 21:58:58.225834 env[1213]: 2025-07-14 21:58:58.193 [INFO][3761] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" iface="eth0" netns="/var/run/netns/cni-f41e23a2-cec4-cb70-a55a-8b6383db0d9c" Jul 14 21:58:58.225834 env[1213]: 2025-07-14 21:58:58.193 [INFO][3761] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" Jul 14 21:58:58.225834 env[1213]: 2025-07-14 21:58:58.193 [INFO][3761] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" Jul 14 21:58:58.225834 env[1213]: 2025-07-14 21:58:58.212 [INFO][3769] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" HandleID="k8s-pod-network.64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" Workload="localhost-k8s-calico--apiserver--5789c98db4--qmxz9-eth0" Jul 14 21:58:58.225834 env[1213]: 2025-07-14 21:58:58.212 [INFO][3769] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:58:58.225834 env[1213]: 2025-07-14 21:58:58.212 [INFO][3769] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:58:58.225834 env[1213]: 2025-07-14 21:58:58.221 [WARNING][3769] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" HandleID="k8s-pod-network.64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" Workload="localhost-k8s-calico--apiserver--5789c98db4--qmxz9-eth0" Jul 14 21:58:58.225834 env[1213]: 2025-07-14 21:58:58.221 [INFO][3769] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" HandleID="k8s-pod-network.64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" Workload="localhost-k8s-calico--apiserver--5789c98db4--qmxz9-eth0" Jul 14 21:58:58.225834 env[1213]: 2025-07-14 21:58:58.222 [INFO][3769] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:58:58.225834 env[1213]: 2025-07-14 21:58:58.224 [INFO][3761] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" Jul 14 21:58:58.226458 env[1213]: time="2025-07-14T21:58:58.225983964Z" level=info msg="TearDown network for sandbox \"64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf\" successfully" Jul 14 21:58:58.226458 env[1213]: time="2025-07-14T21:58:58.226016285Z" level=info msg="StopPodSandbox for \"64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf\" returns successfully" Jul 14 21:58:58.226766 env[1213]: time="2025-07-14T21:58:58.226720208Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5789c98db4-qmxz9,Uid:3c67d7b7-7d0d-4313-a8cc-1f1226c108af,Namespace:calico-apiserver,Attempt:1,}" Jul 14 21:58:58.244990 systemd[1]: run-netns-cni\x2df41e23a2\x2dcec4\x2dcb70\x2da55a\x2d8b6383db0d9c.mount: Deactivated successfully. Jul 14 21:58:58.337644 systemd-networkd[1047]: cali1bd53c6aea9: Link UP Jul 14 21:58:58.340967 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1bd53c6aea9: link becomes ready Jul 14 21:58:58.340785 systemd-networkd[1047]: cali1bd53c6aea9: Gained carrier Jul 14 21:58:58.351107 env[1213]: 2025-07-14 21:58:58.262 [INFO][3777] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 14 21:58:58.351107 env[1213]: 2025-07-14 21:58:58.274 [INFO][3777] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--5789c98db4--qmxz9-eth0 calico-apiserver-5789c98db4- calico-apiserver 3c67d7b7-7d0d-4313-a8cc-1f1226c108af 929 0 2025-07-14 21:58:32 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5789c98db4 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-5789c98db4-qmxz9 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali1bd53c6aea9 [] [] }} ContainerID="663a301a78dbba12d9110cc60974456640fc7a6f390be5164a56fbddddf37160" Namespace="calico-apiserver" Pod="calico-apiserver-5789c98db4-qmxz9" WorkloadEndpoint="localhost-k8s-calico--apiserver--5789c98db4--qmxz9-" Jul 14 21:58:58.351107 env[1213]: 2025-07-14 21:58:58.275 [INFO][3777] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="663a301a78dbba12d9110cc60974456640fc7a6f390be5164a56fbddddf37160" Namespace="calico-apiserver" Pod="calico-apiserver-5789c98db4-qmxz9" WorkloadEndpoint="localhost-k8s-calico--apiserver--5789c98db4--qmxz9-eth0" Jul 14 21:58:58.351107 env[1213]: 2025-07-14 21:58:58.295 [INFO][3791] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="663a301a78dbba12d9110cc60974456640fc7a6f390be5164a56fbddddf37160" HandleID="k8s-pod-network.663a301a78dbba12d9110cc60974456640fc7a6f390be5164a56fbddddf37160" Workload="localhost-k8s-calico--apiserver--5789c98db4--qmxz9-eth0" Jul 14 21:58:58.351107 env[1213]: 2025-07-14 21:58:58.295 [INFO][3791] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="663a301a78dbba12d9110cc60974456640fc7a6f390be5164a56fbddddf37160" HandleID="k8s-pod-network.663a301a78dbba12d9110cc60974456640fc7a6f390be5164a56fbddddf37160" Workload="localhost-k8s-calico--apiserver--5789c98db4--qmxz9-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002dd5f0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-5789c98db4-qmxz9", "timestamp":"2025-07-14 21:58:58.295032739 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 21:58:58.351107 env[1213]: 2025-07-14 21:58:58.295 [INFO][3791] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:58:58.351107 env[1213]: 2025-07-14 21:58:58.295 [INFO][3791] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:58:58.351107 env[1213]: 2025-07-14 21:58:58.295 [INFO][3791] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 21:58:58.351107 env[1213]: 2025-07-14 21:58:58.304 [INFO][3791] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.663a301a78dbba12d9110cc60974456640fc7a6f390be5164a56fbddddf37160" host="localhost" Jul 14 21:58:58.351107 env[1213]: 2025-07-14 21:58:58.309 [INFO][3791] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 21:58:58.351107 env[1213]: 2025-07-14 21:58:58.313 [INFO][3791] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 21:58:58.351107 env[1213]: 2025-07-14 21:58:58.315 [INFO][3791] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 21:58:58.351107 env[1213]: 2025-07-14 21:58:58.317 [INFO][3791] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 21:58:58.351107 env[1213]: 2025-07-14 21:58:58.317 [INFO][3791] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.663a301a78dbba12d9110cc60974456640fc7a6f390be5164a56fbddddf37160" host="localhost" Jul 14 21:58:58.351107 env[1213]: 2025-07-14 21:58:58.319 [INFO][3791] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.663a301a78dbba12d9110cc60974456640fc7a6f390be5164a56fbddddf37160 Jul 14 21:58:58.351107 env[1213]: 2025-07-14 21:58:58.324 [INFO][3791] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.663a301a78dbba12d9110cc60974456640fc7a6f390be5164a56fbddddf37160" host="localhost" Jul 14 21:58:58.351107 env[1213]: 2025-07-14 21:58:58.333 [INFO][3791] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.663a301a78dbba12d9110cc60974456640fc7a6f390be5164a56fbddddf37160" host="localhost" Jul 14 21:58:58.351107 env[1213]: 2025-07-14 21:58:58.333 [INFO][3791] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.663a301a78dbba12d9110cc60974456640fc7a6f390be5164a56fbddddf37160" host="localhost" Jul 14 21:58:58.351107 env[1213]: 2025-07-14 21:58:58.333 [INFO][3791] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:58:58.351107 env[1213]: 2025-07-14 21:58:58.333 [INFO][3791] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="663a301a78dbba12d9110cc60974456640fc7a6f390be5164a56fbddddf37160" HandleID="k8s-pod-network.663a301a78dbba12d9110cc60974456640fc7a6f390be5164a56fbddddf37160" Workload="localhost-k8s-calico--apiserver--5789c98db4--qmxz9-eth0" Jul 14 21:58:58.351696 env[1213]: 2025-07-14 21:58:58.335 [INFO][3777] cni-plugin/k8s.go 418: Populated endpoint ContainerID="663a301a78dbba12d9110cc60974456640fc7a6f390be5164a56fbddddf37160" Namespace="calico-apiserver" Pod="calico-apiserver-5789c98db4-qmxz9" WorkloadEndpoint="localhost-k8s-calico--apiserver--5789c98db4--qmxz9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5789c98db4--qmxz9-eth0", GenerateName:"calico-apiserver-5789c98db4-", Namespace:"calico-apiserver", SelfLink:"", UID:"3c67d7b7-7d0d-4313-a8cc-1f1226c108af", ResourceVersion:"929", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5789c98db4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-5789c98db4-qmxz9", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1bd53c6aea9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:58:58.351696 env[1213]: 2025-07-14 21:58:58.336 [INFO][3777] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="663a301a78dbba12d9110cc60974456640fc7a6f390be5164a56fbddddf37160" Namespace="calico-apiserver" Pod="calico-apiserver-5789c98db4-qmxz9" WorkloadEndpoint="localhost-k8s-calico--apiserver--5789c98db4--qmxz9-eth0" Jul 14 21:58:58.351696 env[1213]: 2025-07-14 21:58:58.336 [INFO][3777] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali1bd53c6aea9 ContainerID="663a301a78dbba12d9110cc60974456640fc7a6f390be5164a56fbddddf37160" Namespace="calico-apiserver" Pod="calico-apiserver-5789c98db4-qmxz9" WorkloadEndpoint="localhost-k8s-calico--apiserver--5789c98db4--qmxz9-eth0" Jul 14 21:58:58.351696 env[1213]: 2025-07-14 21:58:58.338 [INFO][3777] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="663a301a78dbba12d9110cc60974456640fc7a6f390be5164a56fbddddf37160" Namespace="calico-apiserver" Pod="calico-apiserver-5789c98db4-qmxz9" WorkloadEndpoint="localhost-k8s-calico--apiserver--5789c98db4--qmxz9-eth0" Jul 14 21:58:58.351696 env[1213]: 2025-07-14 21:58:58.338 [INFO][3777] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="663a301a78dbba12d9110cc60974456640fc7a6f390be5164a56fbddddf37160" Namespace="calico-apiserver" Pod="calico-apiserver-5789c98db4-qmxz9" WorkloadEndpoint="localhost-k8s-calico--apiserver--5789c98db4--qmxz9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5789c98db4--qmxz9-eth0", GenerateName:"calico-apiserver-5789c98db4-", Namespace:"calico-apiserver", SelfLink:"", UID:"3c67d7b7-7d0d-4313-a8cc-1f1226c108af", ResourceVersion:"929", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5789c98db4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"663a301a78dbba12d9110cc60974456640fc7a6f390be5164a56fbddddf37160", Pod:"calico-apiserver-5789c98db4-qmxz9", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1bd53c6aea9", MAC:"d2:28:4f:29:72:28", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:58:58.351696 env[1213]: 2025-07-14 21:58:58.348 [INFO][3777] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="663a301a78dbba12d9110cc60974456640fc7a6f390be5164a56fbddddf37160" Namespace="calico-apiserver" Pod="calico-apiserver-5789c98db4-qmxz9" WorkloadEndpoint="localhost-k8s-calico--apiserver--5789c98db4--qmxz9-eth0" Jul 14 21:58:58.373558 env[1213]: time="2025-07-14T21:58:58.373374234Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 21:58:58.373558 env[1213]: time="2025-07-14T21:58:58.373418914Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 21:58:58.373558 env[1213]: time="2025-07-14T21:58:58.373428554Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 21:58:58.373917 env[1213]: time="2025-07-14T21:58:58.373883796Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/663a301a78dbba12d9110cc60974456640fc7a6f390be5164a56fbddddf37160 pid=3820 runtime=io.containerd.runc.v2 Jul 14 21:58:58.398153 systemd[1]: run-containerd-runc-k8s.io-663a301a78dbba12d9110cc60974456640fc7a6f390be5164a56fbddddf37160-runc.utrN63.mount: Deactivated successfully. Jul 14 21:58:58.422259 systemd[1]: Started cri-containerd-663a301a78dbba12d9110cc60974456640fc7a6f390be5164a56fbddddf37160.scope. Jul 14 21:58:58.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.447000 audit: BPF prog-id=152 op=LOAD Jul 14 21:58:58.451000 audit[3829]: AVC avc: denied { bpf } for pid=3829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.451000 audit[3829]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=3820 pid=3829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:58.451000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636336133303161373864626261313264393131306363363039373434 Jul 14 21:58:58.451000 audit[3829]: AVC avc: denied { perfmon } for pid=3829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.451000 audit[3829]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3820 pid=3829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:58.451000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636336133303161373864626261313264393131306363363039373434 Jul 14 21:58:58.451000 audit[3829]: AVC avc: denied { bpf } for pid=3829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.451000 audit[3829]: AVC avc: denied { bpf } for pid=3829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.451000 audit[3829]: AVC avc: denied { bpf } for pid=3829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.451000 audit[3829]: AVC avc: denied { perfmon } for pid=3829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.451000 audit[3829]: AVC avc: denied { perfmon } for pid=3829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.451000 audit[3829]: AVC avc: denied { perfmon } for pid=3829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.451000 audit[3829]: AVC avc: denied { perfmon } for pid=3829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.451000 audit[3829]: AVC avc: denied { perfmon } for pid=3829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.451000 audit[3829]: AVC avc: denied { bpf } for pid=3829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.451000 audit[3829]: AVC avc: denied { bpf } for pid=3829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.451000 audit: BPF prog-id=153 op=LOAD Jul 14 21:58:58.451000 audit[3829]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3820 pid=3829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:58.451000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636336133303161373864626261313264393131306363363039373434 Jul 14 21:58:58.452000 audit[3829]: AVC avc: denied { bpf } for pid=3829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.452000 audit[3829]: AVC avc: denied { bpf } for pid=3829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.452000 audit[3829]: AVC avc: denied { perfmon } for pid=3829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.452000 audit[3829]: AVC avc: denied { perfmon } for pid=3829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.452000 audit[3829]: AVC avc: denied { perfmon } for pid=3829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.452000 audit[3829]: AVC avc: denied { perfmon } for pid=3829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.452000 audit[3829]: AVC avc: denied { perfmon } for pid=3829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.452000 audit[3829]: AVC avc: denied { bpf } for pid=3829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.452000 audit[3829]: AVC avc: denied { bpf } for pid=3829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.452000 audit: BPF prog-id=154 op=LOAD Jul 14 21:58:58.452000 audit[3829]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3820 pid=3829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:58.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636336133303161373864626261313264393131306363363039373434 Jul 14 21:58:58.452000 audit: BPF prog-id=154 op=UNLOAD Jul 14 21:58:58.452000 audit: BPF prog-id=153 op=UNLOAD Jul 14 21:58:58.452000 audit[3829]: AVC avc: denied { bpf } for pid=3829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.452000 audit[3829]: AVC avc: denied { bpf } for pid=3829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.452000 audit[3829]: AVC avc: denied { bpf } for pid=3829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.452000 audit[3829]: AVC avc: denied { perfmon } for pid=3829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.452000 audit[3829]: AVC avc: denied { perfmon } for pid=3829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.452000 audit[3829]: AVC avc: denied { perfmon } for pid=3829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.452000 audit[3829]: AVC avc: denied { perfmon } for pid=3829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.452000 audit[3829]: AVC avc: denied { perfmon } for pid=3829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.452000 audit[3829]: AVC avc: denied { bpf } for pid=3829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.452000 audit[3829]: AVC avc: denied { bpf } for pid=3829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:58.452000 audit: BPF prog-id=155 op=LOAD Jul 14 21:58:58.452000 audit[3829]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3820 pid=3829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:58.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636336133303161373864626261313264393131306363363039373434 Jul 14 21:58:58.459768 systemd-resolved[1155]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 21:58:58.486932 env[1213]: time="2025-07-14T21:58:58.486875878Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5789c98db4-qmxz9,Uid:3c67d7b7-7d0d-4313-a8cc-1f1226c108af,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"663a301a78dbba12d9110cc60974456640fc7a6f390be5164a56fbddddf37160\"" Jul 14 21:58:59.017040 systemd-networkd[1047]: cali45e64a5e75d: Gained IPv6LL Jul 14 21:58:59.150290 env[1213]: time="2025-07-14T21:58:59.149803470Z" level=info msg="StopPodSandbox for \"065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7\"" Jul 14 21:58:59.241056 env[1213]: 2025-07-14 21:58:59.203 [INFO][3882] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" Jul 14 21:58:59.241056 env[1213]: 2025-07-14 21:58:59.203 [INFO][3882] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" iface="eth0" netns="/var/run/netns/cni-0c57e559-cb12-204a-ebb9-662a9c63b95d" Jul 14 21:58:59.241056 env[1213]: 2025-07-14 21:58:59.203 [INFO][3882] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" iface="eth0" netns="/var/run/netns/cni-0c57e559-cb12-204a-ebb9-662a9c63b95d" Jul 14 21:58:59.241056 env[1213]: 2025-07-14 21:58:59.203 [INFO][3882] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" iface="eth0" netns="/var/run/netns/cni-0c57e559-cb12-204a-ebb9-662a9c63b95d" Jul 14 21:58:59.241056 env[1213]: 2025-07-14 21:58:59.203 [INFO][3882] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" Jul 14 21:58:59.241056 env[1213]: 2025-07-14 21:58:59.203 [INFO][3882] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" Jul 14 21:58:59.241056 env[1213]: 2025-07-14 21:58:59.225 [INFO][3891] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" HandleID="k8s-pod-network.065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" Workload="localhost-k8s-calico--apiserver--5789c98db4--s57m5-eth0" Jul 14 21:58:59.241056 env[1213]: 2025-07-14 21:58:59.226 [INFO][3891] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:58:59.241056 env[1213]: 2025-07-14 21:58:59.226 [INFO][3891] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:58:59.241056 env[1213]: 2025-07-14 21:58:59.235 [WARNING][3891] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" HandleID="k8s-pod-network.065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" Workload="localhost-k8s-calico--apiserver--5789c98db4--s57m5-eth0" Jul 14 21:58:59.241056 env[1213]: 2025-07-14 21:58:59.235 [INFO][3891] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" HandleID="k8s-pod-network.065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" Workload="localhost-k8s-calico--apiserver--5789c98db4--s57m5-eth0" Jul 14 21:58:59.241056 env[1213]: 2025-07-14 21:58:59.237 [INFO][3891] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:58:59.241056 env[1213]: 2025-07-14 21:58:59.239 [INFO][3882] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" Jul 14 21:58:59.243898 systemd[1]: run-netns-cni\x2d0c57e559\x2dcb12\x2d204a\x2debb9\x2d662a9c63b95d.mount: Deactivated successfully. Jul 14 21:58:59.244374 env[1213]: time="2025-07-14T21:58:59.244336380Z" level=info msg="TearDown network for sandbox \"065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7\" successfully" Jul 14 21:58:59.244460 env[1213]: time="2025-07-14T21:58:59.244443301Z" level=info msg="StopPodSandbox for \"065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7\" returns successfully" Jul 14 21:58:59.245221 env[1213]: time="2025-07-14T21:58:59.245189304Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5789c98db4-s57m5,Uid:a3bdbffd-037e-4027-9eb7-7ff772a71559,Namespace:calico-apiserver,Attempt:1,}" Jul 14 21:58:59.371316 systemd-networkd[1047]: caliaac46836db3: Link UP Jul 14 21:58:59.374056 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 14 21:58:59.374151 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliaac46836db3: link becomes ready Jul 14 21:58:59.374262 systemd-networkd[1047]: caliaac46836db3: Gained carrier Jul 14 21:58:59.388492 env[1213]: 2025-07-14 21:58:59.276 [INFO][3901] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 14 21:58:59.388492 env[1213]: 2025-07-14 21:58:59.289 [INFO][3901] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--5789c98db4--s57m5-eth0 calico-apiserver-5789c98db4- calico-apiserver a3bdbffd-037e-4027-9eb7-7ff772a71559 936 0 2025-07-14 21:58:32 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5789c98db4 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-5789c98db4-s57m5 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] caliaac46836db3 [] [] }} ContainerID="c64dab505d847ec354ef99ad2f4a94f0c5b146063092fc9d995bf6286ab4608d" Namespace="calico-apiserver" Pod="calico-apiserver-5789c98db4-s57m5" WorkloadEndpoint="localhost-k8s-calico--apiserver--5789c98db4--s57m5-" Jul 14 21:58:59.388492 env[1213]: 2025-07-14 21:58:59.289 [INFO][3901] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="c64dab505d847ec354ef99ad2f4a94f0c5b146063092fc9d995bf6286ab4608d" Namespace="calico-apiserver" Pod="calico-apiserver-5789c98db4-s57m5" WorkloadEndpoint="localhost-k8s-calico--apiserver--5789c98db4--s57m5-eth0" Jul 14 21:58:59.388492 env[1213]: 2025-07-14 21:58:59.321 [INFO][3914] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c64dab505d847ec354ef99ad2f4a94f0c5b146063092fc9d995bf6286ab4608d" HandleID="k8s-pod-network.c64dab505d847ec354ef99ad2f4a94f0c5b146063092fc9d995bf6286ab4608d" Workload="localhost-k8s-calico--apiserver--5789c98db4--s57m5-eth0" Jul 14 21:58:59.388492 env[1213]: 2025-07-14 21:58:59.321 [INFO][3914] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="c64dab505d847ec354ef99ad2f4a94f0c5b146063092fc9d995bf6286ab4608d" HandleID="k8s-pod-network.c64dab505d847ec354ef99ad2f4a94f0c5b146063092fc9d995bf6286ab4608d" Workload="localhost-k8s-calico--apiserver--5789c98db4--s57m5-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002dd630), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-5789c98db4-s57m5", "timestamp":"2025-07-14 21:58:59.321501051 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 21:58:59.388492 env[1213]: 2025-07-14 21:58:59.321 [INFO][3914] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:58:59.388492 env[1213]: 2025-07-14 21:58:59.321 [INFO][3914] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:58:59.388492 env[1213]: 2025-07-14 21:58:59.321 [INFO][3914] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 21:58:59.388492 env[1213]: 2025-07-14 21:58:59.334 [INFO][3914] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.c64dab505d847ec354ef99ad2f4a94f0c5b146063092fc9d995bf6286ab4608d" host="localhost" Jul 14 21:58:59.388492 env[1213]: 2025-07-14 21:58:59.342 [INFO][3914] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 21:58:59.388492 env[1213]: 2025-07-14 21:58:59.349 [INFO][3914] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 21:58:59.388492 env[1213]: 2025-07-14 21:58:59.351 [INFO][3914] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 21:58:59.388492 env[1213]: 2025-07-14 21:58:59.355 [INFO][3914] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 21:58:59.388492 env[1213]: 2025-07-14 21:58:59.355 [INFO][3914] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.c64dab505d847ec354ef99ad2f4a94f0c5b146063092fc9d995bf6286ab4608d" host="localhost" Jul 14 21:58:59.388492 env[1213]: 2025-07-14 21:58:59.356 [INFO][3914] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.c64dab505d847ec354ef99ad2f4a94f0c5b146063092fc9d995bf6286ab4608d Jul 14 21:58:59.388492 env[1213]: 2025-07-14 21:58:59.360 [INFO][3914] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.c64dab505d847ec354ef99ad2f4a94f0c5b146063092fc9d995bf6286ab4608d" host="localhost" Jul 14 21:58:59.388492 env[1213]: 2025-07-14 21:58:59.366 [INFO][3914] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.c64dab505d847ec354ef99ad2f4a94f0c5b146063092fc9d995bf6286ab4608d" host="localhost" Jul 14 21:58:59.388492 env[1213]: 2025-07-14 21:58:59.366 [INFO][3914] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.c64dab505d847ec354ef99ad2f4a94f0c5b146063092fc9d995bf6286ab4608d" host="localhost" Jul 14 21:58:59.388492 env[1213]: 2025-07-14 21:58:59.366 [INFO][3914] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:58:59.388492 env[1213]: 2025-07-14 21:58:59.366 [INFO][3914] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="c64dab505d847ec354ef99ad2f4a94f0c5b146063092fc9d995bf6286ab4608d" HandleID="k8s-pod-network.c64dab505d847ec354ef99ad2f4a94f0c5b146063092fc9d995bf6286ab4608d" Workload="localhost-k8s-calico--apiserver--5789c98db4--s57m5-eth0" Jul 14 21:58:59.389301 env[1213]: 2025-07-14 21:58:59.368 [INFO][3901] cni-plugin/k8s.go 418: Populated endpoint ContainerID="c64dab505d847ec354ef99ad2f4a94f0c5b146063092fc9d995bf6286ab4608d" Namespace="calico-apiserver" Pod="calico-apiserver-5789c98db4-s57m5" WorkloadEndpoint="localhost-k8s-calico--apiserver--5789c98db4--s57m5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5789c98db4--s57m5-eth0", GenerateName:"calico-apiserver-5789c98db4-", Namespace:"calico-apiserver", SelfLink:"", UID:"a3bdbffd-037e-4027-9eb7-7ff772a71559", ResourceVersion:"936", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5789c98db4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-5789c98db4-s57m5", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliaac46836db3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:58:59.389301 env[1213]: 2025-07-14 21:58:59.369 [INFO][3901] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="c64dab505d847ec354ef99ad2f4a94f0c5b146063092fc9d995bf6286ab4608d" Namespace="calico-apiserver" Pod="calico-apiserver-5789c98db4-s57m5" WorkloadEndpoint="localhost-k8s-calico--apiserver--5789c98db4--s57m5-eth0" Jul 14 21:58:59.389301 env[1213]: 2025-07-14 21:58:59.369 [INFO][3901] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to caliaac46836db3 ContainerID="c64dab505d847ec354ef99ad2f4a94f0c5b146063092fc9d995bf6286ab4608d" Namespace="calico-apiserver" Pod="calico-apiserver-5789c98db4-s57m5" WorkloadEndpoint="localhost-k8s-calico--apiserver--5789c98db4--s57m5-eth0" Jul 14 21:58:59.389301 env[1213]: 2025-07-14 21:58:59.374 [INFO][3901] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="c64dab505d847ec354ef99ad2f4a94f0c5b146063092fc9d995bf6286ab4608d" Namespace="calico-apiserver" Pod="calico-apiserver-5789c98db4-s57m5" WorkloadEndpoint="localhost-k8s-calico--apiserver--5789c98db4--s57m5-eth0" Jul 14 21:58:59.389301 env[1213]: 2025-07-14 21:58:59.376 [INFO][3901] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="c64dab505d847ec354ef99ad2f4a94f0c5b146063092fc9d995bf6286ab4608d" Namespace="calico-apiserver" Pod="calico-apiserver-5789c98db4-s57m5" WorkloadEndpoint="localhost-k8s-calico--apiserver--5789c98db4--s57m5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5789c98db4--s57m5-eth0", GenerateName:"calico-apiserver-5789c98db4-", Namespace:"calico-apiserver", SelfLink:"", UID:"a3bdbffd-037e-4027-9eb7-7ff772a71559", ResourceVersion:"936", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5789c98db4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c64dab505d847ec354ef99ad2f4a94f0c5b146063092fc9d995bf6286ab4608d", Pod:"calico-apiserver-5789c98db4-s57m5", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliaac46836db3", MAC:"52:0e:2a:ea:22:96", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:58:59.389301 env[1213]: 2025-07-14 21:58:59.386 [INFO][3901] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="c64dab505d847ec354ef99ad2f4a94f0c5b146063092fc9d995bf6286ab4608d" Namespace="calico-apiserver" Pod="calico-apiserver-5789c98db4-s57m5" WorkloadEndpoint="localhost-k8s-calico--apiserver--5789c98db4--s57m5-eth0" Jul 14 21:58:59.469301 env[1213]: time="2025-07-14T21:58:59.465986869Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 21:58:59.469301 env[1213]: time="2025-07-14T21:58:59.466033909Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 21:58:59.469301 env[1213]: time="2025-07-14T21:58:59.466043909Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 21:58:59.469301 env[1213]: time="2025-07-14T21:58:59.467110514Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c64dab505d847ec354ef99ad2f4a94f0c5b146063092fc9d995bf6286ab4608d pid=3938 runtime=io.containerd.runc.v2 Jul 14 21:58:59.496042 systemd[1]: run-containerd-runc-k8s.io-c64dab505d847ec354ef99ad2f4a94f0c5b146063092fc9d995bf6286ab4608d-runc.HLwIDd.mount: Deactivated successfully. Jul 14 21:58:59.505900 env[1213]: time="2025-07-14T21:58:59.505819130Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:59.508956 systemd[1]: Started cri-containerd-c64dab505d847ec354ef99ad2f4a94f0c5b146063092fc9d995bf6286ab4608d.scope. Jul 14 21:58:59.510098 env[1213]: time="2025-07-14T21:58:59.510067189Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:59.514183 env[1213]: time="2025-07-14T21:58:59.514144208Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:59.524896 env[1213]: time="2025-07-14T21:58:59.521686202Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:58:59.524896 env[1213]: time="2025-07-14T21:58:59.522005524Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a\"" Jul 14 21:58:59.527389 env[1213]: time="2025-07-14T21:58:59.527354748Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 14 21:58:59.542152 env[1213]: time="2025-07-14T21:58:59.542104815Z" level=info msg="CreateContainer within sandbox \"4b6bf74947a28606443163809a94262d111150075aa86963328d7e3e7b372fd5\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 14 21:58:59.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.544000 audit: BPF prog-id=156 op=LOAD Jul 14 21:58:59.545000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.545000 audit[3955]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=3938 pid=3955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:59.545000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336346461623530356438343765633335346566393961643266346139 Jul 14 21:58:59.546000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.546000 audit[3955]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3938 pid=3955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:59.546000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336346461623530356438343765633335346566393961643266346139 Jul 14 21:58:59.546000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.546000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.546000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.546000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.546000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.546000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.546000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.546000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.546000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.546000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.546000 audit: BPF prog-id=157 op=LOAD Jul 14 21:58:59.546000 audit[3955]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=3938 pid=3955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:59.546000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336346461623530356438343765633335346566393961643266346139 Jul 14 21:58:59.547000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.547000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.547000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.547000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.547000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.547000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.547000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.547000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.547000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.547000 audit: BPF prog-id=158 op=LOAD Jul 14 21:58:59.547000 audit[3955]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=3938 pid=3955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:59.547000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336346461623530356438343765633335346566393961643266346139 Jul 14 21:58:59.547000 audit: BPF prog-id=158 op=UNLOAD Jul 14 21:58:59.547000 audit: BPF prog-id=157 op=UNLOAD Jul 14 21:58:59.547000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.547000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.547000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.547000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.547000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.547000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.547000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.547000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.547000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.547000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.547000 audit: BPF prog-id=159 op=LOAD Jul 14 21:58:59.547000 audit[3955]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=3938 pid=3955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:59.547000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336346461623530356438343765633335346566393961643266346139 Jul 14 21:58:59.550088 systemd-resolved[1155]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 21:58:59.567813 env[1213]: time="2025-07-14T21:58:59.567738812Z" level=info msg="CreateContainer within sandbox \"4b6bf74947a28606443163809a94262d111150075aa86963328d7e3e7b372fd5\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"59ef6a758491d563026526ea7dca2d1fa530240492ad689f9202c17d69141db5\"" Jul 14 21:58:59.568653 env[1213]: time="2025-07-14T21:58:59.568618216Z" level=info msg="StartContainer for \"59ef6a758491d563026526ea7dca2d1fa530240492ad689f9202c17d69141db5\"" Jul 14 21:58:59.586422 env[1213]: time="2025-07-14T21:58:59.586374177Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5789c98db4-s57m5,Uid:a3bdbffd-037e-4027-9eb7-7ff772a71559,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"c64dab505d847ec354ef99ad2f4a94f0c5b146063092fc9d995bf6286ab4608d\"" Jul 14 21:58:59.602636 systemd[1]: Started cri-containerd-59ef6a758491d563026526ea7dca2d1fa530240492ad689f9202c17d69141db5.scope. Jul 14 21:58:59.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.692000 audit: BPF prog-id=160 op=LOAD Jul 14 21:58:59.692000 audit[4000]: AVC avc: denied { bpf } for pid=4000 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.692000 audit[4000]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3716 pid=4000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:59.692000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539656636613735383439316435363330323635323665613764636132 Jul 14 21:58:59.692000 audit[4000]: AVC avc: denied { perfmon } for pid=4000 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.692000 audit[4000]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3716 pid=4000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:59.692000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539656636613735383439316435363330323635323665613764636132 Jul 14 21:58:59.692000 audit[4000]: AVC avc: denied { bpf } for pid=4000 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.692000 audit[4000]: AVC avc: denied { bpf } for pid=4000 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.692000 audit[4000]: AVC avc: denied { bpf } for pid=4000 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.692000 audit[4000]: AVC avc: denied { perfmon } for pid=4000 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.692000 audit[4000]: AVC avc: denied { perfmon } for pid=4000 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.692000 audit[4000]: AVC avc: denied { perfmon } for pid=4000 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.692000 audit[4000]: AVC avc: denied { perfmon } for pid=4000 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.692000 audit[4000]: AVC avc: denied { perfmon } for pid=4000 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.692000 audit[4000]: AVC avc: denied { bpf } for pid=4000 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.692000 audit[4000]: AVC avc: denied { bpf } for pid=4000 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.692000 audit: BPF prog-id=161 op=LOAD Jul 14 21:58:59.692000 audit[4000]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3716 pid=4000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:59.692000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539656636613735383439316435363330323635323665613764636132 Jul 14 21:58:59.693000 audit[4000]: AVC avc: denied { bpf } for pid=4000 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.693000 audit[4000]: AVC avc: denied { bpf } for pid=4000 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.693000 audit[4000]: AVC avc: denied { perfmon } for pid=4000 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.693000 audit[4000]: AVC avc: denied { perfmon } for pid=4000 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.693000 audit[4000]: AVC avc: denied { perfmon } for pid=4000 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.693000 audit[4000]: AVC avc: denied { perfmon } for pid=4000 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.693000 audit[4000]: AVC avc: denied { perfmon } for pid=4000 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.693000 audit[4000]: AVC avc: denied { bpf } for pid=4000 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.693000 audit[4000]: AVC avc: denied { bpf } for pid=4000 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.693000 audit: BPF prog-id=162 op=LOAD Jul 14 21:58:59.693000 audit[4000]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=19 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3716 pid=4000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:59.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539656636613735383439316435363330323635323665613764636132 Jul 14 21:58:59.693000 audit: BPF prog-id=162 op=UNLOAD Jul 14 21:58:59.693000 audit: BPF prog-id=161 op=UNLOAD Jul 14 21:58:59.693000 audit[4000]: AVC avc: denied { bpf } for pid=4000 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.693000 audit[4000]: AVC avc: denied { bpf } for pid=4000 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.693000 audit[4000]: AVC avc: denied { bpf } for pid=4000 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.693000 audit[4000]: AVC avc: denied { perfmon } for pid=4000 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.693000 audit[4000]: AVC avc: denied { perfmon } for pid=4000 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.693000 audit[4000]: AVC avc: denied { perfmon } for pid=4000 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.693000 audit[4000]: AVC avc: denied { perfmon } for pid=4000 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.693000 audit[4000]: AVC avc: denied { perfmon } for pid=4000 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.693000 audit[4000]: AVC avc: denied { bpf } for pid=4000 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.693000 audit[4000]: AVC avc: denied { bpf } for pid=4000 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:58:59.693000 audit: BPF prog-id=163 op=LOAD Jul 14 21:58:59.693000 audit[4000]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3716 pid=4000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:58:59.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539656636613735383439316435363330323635323665613764636132 Jul 14 21:58:59.712212 env[1213]: time="2025-07-14T21:58:59.712167509Z" level=info msg="StartContainer for \"59ef6a758491d563026526ea7dca2d1fa530240492ad689f9202c17d69141db5\" returns successfully" Jul 14 21:59:00.040980 systemd-networkd[1047]: cali1bd53c6aea9: Gained IPv6LL Jul 14 21:59:00.147601 kubelet[1982]: I0714 21:59:00.147147 1982 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 21:59:00.150644 env[1213]: time="2025-07-14T21:59:00.150596503Z" level=info msg="StopPodSandbox for \"0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191\"" Jul 14 21:59:00.150820 env[1213]: time="2025-07-14T21:59:00.150789264Z" level=info msg="StopPodSandbox for \"62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6\"" Jul 14 21:59:00.297930 env[1213]: 2025-07-14 21:59:00.226 [INFO][4069] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" Jul 14 21:59:00.297930 env[1213]: 2025-07-14 21:59:00.226 [INFO][4069] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" iface="eth0" netns="/var/run/netns/cni-6c9c8887-06d0-7104-8be4-f5345be83b71" Jul 14 21:59:00.297930 env[1213]: 2025-07-14 21:59:00.226 [INFO][4069] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" iface="eth0" netns="/var/run/netns/cni-6c9c8887-06d0-7104-8be4-f5345be83b71" Jul 14 21:59:00.297930 env[1213]: 2025-07-14 21:59:00.227 [INFO][4069] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" iface="eth0" netns="/var/run/netns/cni-6c9c8887-06d0-7104-8be4-f5345be83b71" Jul 14 21:59:00.297930 env[1213]: 2025-07-14 21:59:00.227 [INFO][4069] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" Jul 14 21:59:00.297930 env[1213]: 2025-07-14 21:59:00.227 [INFO][4069] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" Jul 14 21:59:00.297930 env[1213]: 2025-07-14 21:59:00.254 [INFO][4106] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" HandleID="k8s-pod-network.62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" Workload="localhost-k8s-csi--node--driver--jtcvj-eth0" Jul 14 21:59:00.297930 env[1213]: 2025-07-14 21:59:00.254 [INFO][4106] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:59:00.297930 env[1213]: 2025-07-14 21:59:00.255 [INFO][4106] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:59:00.297930 env[1213]: 2025-07-14 21:59:00.279 [WARNING][4106] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" HandleID="k8s-pod-network.62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" Workload="localhost-k8s-csi--node--driver--jtcvj-eth0" Jul 14 21:59:00.297930 env[1213]: 2025-07-14 21:59:00.279 [INFO][4106] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" HandleID="k8s-pod-network.62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" Workload="localhost-k8s-csi--node--driver--jtcvj-eth0" Jul 14 21:59:00.297930 env[1213]: 2025-07-14 21:59:00.282 [INFO][4106] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:59:00.297930 env[1213]: 2025-07-14 21:59:00.284 [INFO][4069] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" Jul 14 21:59:00.297930 env[1213]: time="2025-07-14T21:59:00.295500162Z" level=info msg="TearDown network for sandbox \"62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6\" successfully" Jul 14 21:59:00.297930 env[1213]: time="2025-07-14T21:59:00.295530962Z" level=info msg="StopPodSandbox for \"62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6\" returns successfully" Jul 14 21:59:00.297838 systemd[1]: run-netns-cni\x2d6c9c8887\x2d06d0\x2d7104\x2d8be4\x2df5345be83b71.mount: Deactivated successfully. Jul 14 21:59:00.299462 env[1213]: time="2025-07-14T21:59:00.299425021Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-jtcvj,Uid:3c931f77-c334-4b3e-a241-dda45696bef8,Namespace:calico-system,Attempt:1,}" Jul 14 21:59:00.308194 env[1213]: 2025-07-14 21:59:00.228 [INFO][4077] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" Jul 14 21:59:00.308194 env[1213]: 2025-07-14 21:59:00.228 [INFO][4077] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" iface="eth0" netns="/var/run/netns/cni-92072f54-b16b-13bf-eb29-af9d3b6dacf5" Jul 14 21:59:00.308194 env[1213]: 2025-07-14 21:59:00.228 [INFO][4077] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" iface="eth0" netns="/var/run/netns/cni-92072f54-b16b-13bf-eb29-af9d3b6dacf5" Jul 14 21:59:00.308194 env[1213]: 2025-07-14 21:59:00.228 [INFO][4077] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" iface="eth0" netns="/var/run/netns/cni-92072f54-b16b-13bf-eb29-af9d3b6dacf5" Jul 14 21:59:00.308194 env[1213]: 2025-07-14 21:59:00.228 [INFO][4077] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" Jul 14 21:59:00.308194 env[1213]: 2025-07-14 21:59:00.228 [INFO][4077] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" Jul 14 21:59:00.308194 env[1213]: 2025-07-14 21:59:00.287 [INFO][4108] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" HandleID="k8s-pod-network.0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" Workload="localhost-k8s-goldmane--58fd7646b9--6w85n-eth0" Jul 14 21:59:00.308194 env[1213]: 2025-07-14 21:59:00.287 [INFO][4108] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:59:00.308194 env[1213]: 2025-07-14 21:59:00.287 [INFO][4108] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:59:00.308194 env[1213]: 2025-07-14 21:59:00.300 [WARNING][4108] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" HandleID="k8s-pod-network.0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" Workload="localhost-k8s-goldmane--58fd7646b9--6w85n-eth0" Jul 14 21:59:00.308194 env[1213]: 2025-07-14 21:59:00.301 [INFO][4108] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" HandleID="k8s-pod-network.0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" Workload="localhost-k8s-goldmane--58fd7646b9--6w85n-eth0" Jul 14 21:59:00.308194 env[1213]: 2025-07-14 21:59:00.303 [INFO][4108] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:59:00.308194 env[1213]: 2025-07-14 21:59:00.306 [INFO][4077] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" Jul 14 21:59:00.310977 systemd[1]: run-netns-cni\x2d92072f54\x2db16b\x2d13bf\x2deb29\x2daf9d3b6dacf5.mount: Deactivated successfully. Jul 14 21:59:00.311279 env[1213]: time="2025-07-14T21:59:00.311236438Z" level=info msg="TearDown network for sandbox \"0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191\" successfully" Jul 14 21:59:00.311366 env[1213]: time="2025-07-14T21:59:00.311348839Z" level=info msg="StopPodSandbox for \"0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191\" returns successfully" Jul 14 21:59:00.312299 env[1213]: time="2025-07-14T21:59:00.312261683Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-6w85n,Uid:f1062b0e-e331-4c57-a847-8cf87bfec2f2,Namespace:calico-system,Attempt:1,}" Jul 14 21:59:00.333840 systemd[1]: run-containerd-runc-k8s.io-bcfa4edebbfaedf7d4f72d10dd7a9b4c2e380727a0722a7b9575023a5d8720e3-runc.mN8RcJ.mount: Deactivated successfully. Jul 14 21:59:00.337543 kubelet[1982]: I0714 21:59:00.337470 1982 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-8c8858955-jvl7q" podStartSLOduration=21.412090515 podStartE2EDuration="23.337451725s" podCreationTimestamp="2025-07-14 21:58:37 +0000 UTC" firstStartedPulling="2025-07-14 21:58:57.601157974 +0000 UTC m=+44.536956557" lastFinishedPulling="2025-07-14 21:58:59.526519184 +0000 UTC m=+46.462317767" observedRunningTime="2025-07-14 21:59:00.337047403 +0000 UTC m=+47.272845986" watchObservedRunningTime="2025-07-14 21:59:00.337451725 +0000 UTC m=+47.273250268" Jul 14 21:59:00.426054 systemd-networkd[1047]: caliaac46836db3: Gained IPv6LL Jul 14 21:59:00.521347 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 14 21:59:00.521912 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calia60046d79da: link becomes ready Jul 14 21:59:00.521508 systemd-networkd[1047]: calia60046d79da: Link UP Jul 14 21:59:00.524144 systemd-networkd[1047]: calia60046d79da: Gained carrier Jul 14 21:59:00.538593 env[1213]: 2025-07-14 21:59:00.378 [INFO][4145] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 14 21:59:00.538593 env[1213]: 2025-07-14 21:59:00.403 [INFO][4145] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--jtcvj-eth0 csi-node-driver- calico-system 3c931f77-c334-4b3e-a241-dda45696bef8 953 0 2025-07-14 21:58:36 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:57bd658777 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-jtcvj eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] calia60046d79da [] [] }} ContainerID="a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f" Namespace="calico-system" Pod="csi-node-driver-jtcvj" WorkloadEndpoint="localhost-k8s-csi--node--driver--jtcvj-" Jul 14 21:59:00.538593 env[1213]: 2025-07-14 21:59:00.403 [INFO][4145] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f" Namespace="calico-system" Pod="csi-node-driver-jtcvj" WorkloadEndpoint="localhost-k8s-csi--node--driver--jtcvj-eth0" Jul 14 21:59:00.538593 env[1213]: 2025-07-14 21:59:00.459 [INFO][4189] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f" HandleID="k8s-pod-network.a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f" Workload="localhost-k8s-csi--node--driver--jtcvj-eth0" Jul 14 21:59:00.538593 env[1213]: 2025-07-14 21:59:00.459 [INFO][4189] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f" HandleID="k8s-pod-network.a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f" Workload="localhost-k8s-csi--node--driver--jtcvj-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40003535f0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-jtcvj", "timestamp":"2025-07-14 21:59:00.459116632 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 21:59:00.538593 env[1213]: 2025-07-14 21:59:00.460 [INFO][4189] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:59:00.538593 env[1213]: 2025-07-14 21:59:00.460 [INFO][4189] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:59:00.538593 env[1213]: 2025-07-14 21:59:00.460 [INFO][4189] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 21:59:00.538593 env[1213]: 2025-07-14 21:59:00.472 [INFO][4189] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f" host="localhost" Jul 14 21:59:00.538593 env[1213]: 2025-07-14 21:59:00.485 [INFO][4189] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 21:59:00.538593 env[1213]: 2025-07-14 21:59:00.494 [INFO][4189] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 21:59:00.538593 env[1213]: 2025-07-14 21:59:00.496 [INFO][4189] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 21:59:00.538593 env[1213]: 2025-07-14 21:59:00.499 [INFO][4189] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 21:59:00.538593 env[1213]: 2025-07-14 21:59:00.499 [INFO][4189] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f" host="localhost" Jul 14 21:59:00.538593 env[1213]: 2025-07-14 21:59:00.500 [INFO][4189] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f Jul 14 21:59:00.538593 env[1213]: 2025-07-14 21:59:00.504 [INFO][4189] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f" host="localhost" Jul 14 21:59:00.538593 env[1213]: 2025-07-14 21:59:00.511 [INFO][4189] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f" host="localhost" Jul 14 21:59:00.538593 env[1213]: 2025-07-14 21:59:00.511 [INFO][4189] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f" host="localhost" Jul 14 21:59:00.538593 env[1213]: 2025-07-14 21:59:00.511 [INFO][4189] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:59:00.538593 env[1213]: 2025-07-14 21:59:00.511 [INFO][4189] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f" HandleID="k8s-pod-network.a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f" Workload="localhost-k8s-csi--node--driver--jtcvj-eth0" Jul 14 21:59:00.539237 env[1213]: 2025-07-14 21:59:00.513 [INFO][4145] cni-plugin/k8s.go 418: Populated endpoint ContainerID="a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f" Namespace="calico-system" Pod="csi-node-driver-jtcvj" WorkloadEndpoint="localhost-k8s-csi--node--driver--jtcvj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--jtcvj-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"3c931f77-c334-4b3e-a241-dda45696bef8", ResourceVersion:"953", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-jtcvj", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calia60046d79da", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:59:00.539237 env[1213]: 2025-07-14 21:59:00.513 [INFO][4145] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f" Namespace="calico-system" Pod="csi-node-driver-jtcvj" WorkloadEndpoint="localhost-k8s-csi--node--driver--jtcvj-eth0" Jul 14 21:59:00.539237 env[1213]: 2025-07-14 21:59:00.513 [INFO][4145] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calia60046d79da ContainerID="a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f" Namespace="calico-system" Pod="csi-node-driver-jtcvj" WorkloadEndpoint="localhost-k8s-csi--node--driver--jtcvj-eth0" Jul 14 21:59:00.539237 env[1213]: 2025-07-14 21:59:00.522 [INFO][4145] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f" Namespace="calico-system" Pod="csi-node-driver-jtcvj" WorkloadEndpoint="localhost-k8s-csi--node--driver--jtcvj-eth0" Jul 14 21:59:00.539237 env[1213]: 2025-07-14 21:59:00.525 [INFO][4145] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f" Namespace="calico-system" Pod="csi-node-driver-jtcvj" WorkloadEndpoint="localhost-k8s-csi--node--driver--jtcvj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--jtcvj-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"3c931f77-c334-4b3e-a241-dda45696bef8", ResourceVersion:"953", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f", Pod:"csi-node-driver-jtcvj", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calia60046d79da", MAC:"6e:0f:a2:fe:02:fe", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:59:00.539237 env[1213]: 2025-07-14 21:59:00.535 [INFO][4145] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f" Namespace="calico-system" Pod="csi-node-driver-jtcvj" WorkloadEndpoint="localhost-k8s-csi--node--driver--jtcvj-eth0" Jul 14 21:59:00.562535 env[1213]: time="2025-07-14T21:59:00.562416530Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 21:59:00.562670 env[1213]: time="2025-07-14T21:59:00.562476050Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 21:59:00.562670 env[1213]: time="2025-07-14T21:59:00.562487330Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 21:59:00.562809 env[1213]: time="2025-07-14T21:59:00.562781212Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f pid=4225 runtime=io.containerd.runc.v2 Jul 14 21:59:00.577421 systemd[1]: Started cri-containerd-a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f.scope. Jul 14 21:59:00.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.611407 kernel: kauditd_printk_skb: 224 callbacks suppressed Jul 14 21:59:00.611484 kernel: audit: type=1400 audit(1752530340.609:1123): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.616320 kernel: audit: type=1400 audit(1752530340.609:1124): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620480 kernel: audit: type=1400 audit(1752530340.609:1125): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.623928 kernel: audit: type=1400 audit(1752530340.609:1126): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.628228 kernel: audit: type=1400 audit(1752530340.609:1127): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.628206 systemd-resolved[1155]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 21:59:00.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.631360 kernel: audit: type=1400 audit(1752530340.609:1128): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.636032 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali45772671ac6: link becomes ready Jul 14 21:59:00.635677 systemd-networkd[1047]: cali45772671ac6: Link UP Jul 14 21:59:00.635931 systemd-networkd[1047]: cali45772671ac6: Gained carrier Jul 14 21:59:00.641914 kernel: audit: type=1400 audit(1752530340.609:1129): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.648457 kernel: audit: type=1400 audit(1752530340.609:1130): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.651335 kernel: audit: type=1400 audit(1752530340.609:1131): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.657666 env[1213]: 2025-07-14 21:59:00.411 [INFO][4154] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 14 21:59:00.657666 env[1213]: 2025-07-14 21:59:00.434 [INFO][4154] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--58fd7646b9--6w85n-eth0 goldmane-58fd7646b9- calico-system f1062b0e-e331-4c57-a847-8cf87bfec2f2 954 0 2025-07-14 21:58:36 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:58fd7646b9 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-58fd7646b9-6w85n eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali45772671ac6 [] [] }} ContainerID="cd51c7eaaa5db8e443e78eb21e869f827291c10eca7d91b9830ff660da623732" Namespace="calico-system" Pod="goldmane-58fd7646b9-6w85n" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--6w85n-" Jul 14 21:59:00.657666 env[1213]: 2025-07-14 21:59:00.434 [INFO][4154] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="cd51c7eaaa5db8e443e78eb21e869f827291c10eca7d91b9830ff660da623732" Namespace="calico-system" Pod="goldmane-58fd7646b9-6w85n" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--6w85n-eth0" Jul 14 21:59:00.657666 env[1213]: 2025-07-14 21:59:00.499 [INFO][4202] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="cd51c7eaaa5db8e443e78eb21e869f827291c10eca7d91b9830ff660da623732" HandleID="k8s-pod-network.cd51c7eaaa5db8e443e78eb21e869f827291c10eca7d91b9830ff660da623732" Workload="localhost-k8s-goldmane--58fd7646b9--6w85n-eth0" Jul 14 21:59:00.657666 env[1213]: 2025-07-14 21:59:00.499 [INFO][4202] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="cd51c7eaaa5db8e443e78eb21e869f827291c10eca7d91b9830ff660da623732" HandleID="k8s-pod-network.cd51c7eaaa5db8e443e78eb21e869f827291c10eca7d91b9830ff660da623732" Workload="localhost-k8s-goldmane--58fd7646b9--6w85n-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002ab4d0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-58fd7646b9-6w85n", "timestamp":"2025-07-14 21:59:00.499474866 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 21:59:00.657666 env[1213]: 2025-07-14 21:59:00.499 [INFO][4202] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:59:00.657666 env[1213]: 2025-07-14 21:59:00.511 [INFO][4202] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:59:00.657666 env[1213]: 2025-07-14 21:59:00.511 [INFO][4202] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 21:59:00.657666 env[1213]: 2025-07-14 21:59:00.571 [INFO][4202] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.cd51c7eaaa5db8e443e78eb21e869f827291c10eca7d91b9830ff660da623732" host="localhost" Jul 14 21:59:00.657666 env[1213]: 2025-07-14 21:59:00.587 [INFO][4202] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 21:59:00.657666 env[1213]: 2025-07-14 21:59:00.592 [INFO][4202] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 21:59:00.657666 env[1213]: 2025-07-14 21:59:00.595 [INFO][4202] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 21:59:00.657666 env[1213]: 2025-07-14 21:59:00.600 [INFO][4202] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 21:59:00.657666 env[1213]: 2025-07-14 21:59:00.600 [INFO][4202] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.cd51c7eaaa5db8e443e78eb21e869f827291c10eca7d91b9830ff660da623732" host="localhost" Jul 14 21:59:00.657666 env[1213]: 2025-07-14 21:59:00.603 [INFO][4202] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.cd51c7eaaa5db8e443e78eb21e869f827291c10eca7d91b9830ff660da623732 Jul 14 21:59:00.657666 env[1213]: 2025-07-14 21:59:00.609 [INFO][4202] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.cd51c7eaaa5db8e443e78eb21e869f827291c10eca7d91b9830ff660da623732" host="localhost" Jul 14 21:59:00.657666 env[1213]: 2025-07-14 21:59:00.627 [INFO][4202] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.cd51c7eaaa5db8e443e78eb21e869f827291c10eca7d91b9830ff660da623732" host="localhost" Jul 14 21:59:00.657666 env[1213]: 2025-07-14 21:59:00.627 [INFO][4202] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.cd51c7eaaa5db8e443e78eb21e869f827291c10eca7d91b9830ff660da623732" host="localhost" Jul 14 21:59:00.657666 env[1213]: 2025-07-14 21:59:00.627 [INFO][4202] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:59:00.657666 env[1213]: 2025-07-14 21:59:00.627 [INFO][4202] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="cd51c7eaaa5db8e443e78eb21e869f827291c10eca7d91b9830ff660da623732" HandleID="k8s-pod-network.cd51c7eaaa5db8e443e78eb21e869f827291c10eca7d91b9830ff660da623732" Workload="localhost-k8s-goldmane--58fd7646b9--6w85n-eth0" Jul 14 21:59:00.658309 kernel: audit: type=1400 audit(1752530340.610:1132): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.610000 audit: BPF prog-id=164 op=LOAD Jul 14 21:59:00.619000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.619000 audit[4233]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4225 pid=4233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:00.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138653665306162323666373661346233343165393066643839363136 Jul 14 21:59:00.619000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.619000 audit[4233]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4225 pid=4233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:00.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138653665306162323666373661346233343165393066643839363136 Jul 14 21:59:00.620000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620000 audit: BPF prog-id=165 op=LOAD Jul 14 21:59:00.620000 audit[4233]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4225 pid=4233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:00.620000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138653665306162323666373661346233343165393066643839363136 Jul 14 21:59:00.620000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620000 audit: BPF prog-id=166 op=LOAD Jul 14 21:59:00.620000 audit[4233]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4225 pid=4233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:00.620000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138653665306162323666373661346233343165393066643839363136 Jul 14 21:59:00.620000 audit: BPF prog-id=166 op=UNLOAD Jul 14 21:59:00.620000 audit: BPF prog-id=165 op=UNLOAD Jul 14 21:59:00.620000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.620000 audit: BPF prog-id=167 op=LOAD Jul 14 21:59:00.620000 audit[4233]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4225 pid=4233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:00.620000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138653665306162323666373661346233343165393066643839363136 Jul 14 21:59:00.659752 env[1213]: 2025-07-14 21:59:00.632 [INFO][4154] cni-plugin/k8s.go 418: Populated endpoint ContainerID="cd51c7eaaa5db8e443e78eb21e869f827291c10eca7d91b9830ff660da623732" Namespace="calico-system" Pod="goldmane-58fd7646b9-6w85n" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--6w85n-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--6w85n-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"f1062b0e-e331-4c57-a847-8cf87bfec2f2", ResourceVersion:"954", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-58fd7646b9-6w85n", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali45772671ac6", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:59:00.659752 env[1213]: 2025-07-14 21:59:00.632 [INFO][4154] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="cd51c7eaaa5db8e443e78eb21e869f827291c10eca7d91b9830ff660da623732" Namespace="calico-system" Pod="goldmane-58fd7646b9-6w85n" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--6w85n-eth0" Jul 14 21:59:00.659752 env[1213]: 2025-07-14 21:59:00.632 [INFO][4154] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali45772671ac6 ContainerID="cd51c7eaaa5db8e443e78eb21e869f827291c10eca7d91b9830ff660da623732" Namespace="calico-system" Pod="goldmane-58fd7646b9-6w85n" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--6w85n-eth0" Jul 14 21:59:00.659752 env[1213]: 2025-07-14 21:59:00.635 [INFO][4154] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="cd51c7eaaa5db8e443e78eb21e869f827291c10eca7d91b9830ff660da623732" Namespace="calico-system" Pod="goldmane-58fd7646b9-6w85n" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--6w85n-eth0" Jul 14 21:59:00.659752 env[1213]: 2025-07-14 21:59:00.636 [INFO][4154] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="cd51c7eaaa5db8e443e78eb21e869f827291c10eca7d91b9830ff660da623732" Namespace="calico-system" Pod="goldmane-58fd7646b9-6w85n" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--6w85n-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--6w85n-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"f1062b0e-e331-4c57-a847-8cf87bfec2f2", ResourceVersion:"954", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"cd51c7eaaa5db8e443e78eb21e869f827291c10eca7d91b9830ff660da623732", Pod:"goldmane-58fd7646b9-6w85n", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali45772671ac6", MAC:"72:f9:07:b4:3c:93", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:59:00.659752 env[1213]: 2025-07-14 21:59:00.655 [INFO][4154] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="cd51c7eaaa5db8e443e78eb21e869f827291c10eca7d91b9830ff660da623732" Namespace="calico-system" Pod="goldmane-58fd7646b9-6w85n" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--6w85n-eth0" Jul 14 21:59:00.686368 env[1213]: time="2025-07-14T21:59:00.686326648Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-jtcvj,Uid:3c931f77-c334-4b3e-a241-dda45696bef8,Namespace:calico-system,Attempt:1,} returns sandbox id \"a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f\"" Jul 14 21:59:00.705560 env[1213]: time="2025-07-14T21:59:00.705357300Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 21:59:00.705560 env[1213]: time="2025-07-14T21:59:00.705398620Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 21:59:00.705560 env[1213]: time="2025-07-14T21:59:00.705418020Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 21:59:00.705803 env[1213]: time="2025-07-14T21:59:00.705582781Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cd51c7eaaa5db8e443e78eb21e869f827291c10eca7d91b9830ff660da623732 pid=4289 runtime=io.containerd.runc.v2 Jul 14 21:59:00.723634 systemd[1]: Started cri-containerd-cd51c7eaaa5db8e443e78eb21e869f827291c10eca7d91b9830ff660da623732.scope. Jul 14 21:59:00.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.765000 audit: BPF prog-id=168 op=LOAD Jul 14 21:59:00.765000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.765000 audit[4298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=4289 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:00.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364353163376561616135646238653434336537386562323165383639 Jul 14 21:59:00.765000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.765000 audit[4298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=4289 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:00.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364353163376561616135646238653434336537386562323165383639 Jul 14 21:59:00.765000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.765000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.765000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.765000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.765000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.765000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.765000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.765000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.765000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.765000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.765000 audit: BPF prog-id=169 op=LOAD Jul 14 21:59:00.765000 audit[4298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=4289 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:00.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364353163376561616135646238653434336537386562323165383639 Jul 14 21:59:00.766000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.766000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.766000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.766000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.766000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.766000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.766000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.766000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.766000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.766000 audit: BPF prog-id=170 op=LOAD Jul 14 21:59:00.766000 audit[4298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=4289 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:00.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364353163376561616135646238653434336537386562323165383639 Jul 14 21:59:00.766000 audit: BPF prog-id=170 op=UNLOAD Jul 14 21:59:00.766000 audit: BPF prog-id=169 op=UNLOAD Jul 14 21:59:00.766000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.766000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.766000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.766000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.766000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.766000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.766000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.766000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.766000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.766000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:00.766000 audit: BPF prog-id=171 op=LOAD Jul 14 21:59:00.766000 audit[4298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=4289 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:00.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364353163376561616135646238653434336537386562323165383639 Jul 14 21:59:00.767929 systemd-resolved[1155]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 21:59:00.785129 env[1213]: time="2025-07-14T21:59:00.785086724Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-6w85n,Uid:f1062b0e-e331-4c57-a847-8cf87bfec2f2,Namespace:calico-system,Attempt:1,} returns sandbox id \"cd51c7eaaa5db8e443e78eb21e869f827291c10eca7d91b9830ff660da623732\"" Jul 14 21:59:01.151517 env[1213]: time="2025-07-14T21:59:01.151469612Z" level=info msg="StopPodSandbox for \"27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314\"" Jul 14 21:59:01.153227 env[1213]: time="2025-07-14T21:59:01.153177261Z" level=info msg="StopPodSandbox for \"e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d\"" Jul 14 21:59:01.262553 env[1213]: 2025-07-14 21:59:01.210 [INFO][4343] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" Jul 14 21:59:01.262553 env[1213]: 2025-07-14 21:59:01.212 [INFO][4343] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" iface="eth0" netns="/var/run/netns/cni-da95d169-0f00-fba3-9cd2-eaed7b77c04e" Jul 14 21:59:01.262553 env[1213]: 2025-07-14 21:59:01.212 [INFO][4343] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" iface="eth0" netns="/var/run/netns/cni-da95d169-0f00-fba3-9cd2-eaed7b77c04e" Jul 14 21:59:01.262553 env[1213]: 2025-07-14 21:59:01.212 [INFO][4343] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" iface="eth0" netns="/var/run/netns/cni-da95d169-0f00-fba3-9cd2-eaed7b77c04e" Jul 14 21:59:01.262553 env[1213]: 2025-07-14 21:59:01.212 [INFO][4343] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" Jul 14 21:59:01.262553 env[1213]: 2025-07-14 21:59:01.212 [INFO][4343] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" Jul 14 21:59:01.262553 env[1213]: 2025-07-14 21:59:01.244 [INFO][4364] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" HandleID="k8s-pod-network.e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" Workload="localhost-k8s-coredns--7c65d6cfc9--hk8zv-eth0" Jul 14 21:59:01.262553 env[1213]: 2025-07-14 21:59:01.244 [INFO][4364] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:59:01.262553 env[1213]: 2025-07-14 21:59:01.244 [INFO][4364] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:59:01.262553 env[1213]: 2025-07-14 21:59:01.252 [WARNING][4364] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" HandleID="k8s-pod-network.e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" Workload="localhost-k8s-coredns--7c65d6cfc9--hk8zv-eth0" Jul 14 21:59:01.262553 env[1213]: 2025-07-14 21:59:01.252 [INFO][4364] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" HandleID="k8s-pod-network.e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" Workload="localhost-k8s-coredns--7c65d6cfc9--hk8zv-eth0" Jul 14 21:59:01.262553 env[1213]: 2025-07-14 21:59:01.254 [INFO][4364] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:59:01.262553 env[1213]: 2025-07-14 21:59:01.255 [INFO][4343] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" Jul 14 21:59:01.265643 env[1213]: time="2025-07-14T21:59:01.265603113Z" level=info msg="TearDown network for sandbox \"e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d\" successfully" Jul 14 21:59:01.265747 env[1213]: time="2025-07-14T21:59:01.265729114Z" level=info msg="StopPodSandbox for \"e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d\" returns successfully" Jul 14 21:59:01.265890 systemd[1]: run-netns-cni\x2dda95d169\x2d0f00\x2dfba3\x2d9cd2\x2deaed7b77c04e.mount: Deactivated successfully. Jul 14 21:59:01.266490 kubelet[1982]: E0714 21:59:01.266265 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:59:01.266756 env[1213]: time="2025-07-14T21:59:01.266629478Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-hk8zv,Uid:4411d551-971a-4801-a959-d2959312b095,Namespace:kube-system,Attempt:1,}" Jul 14 21:59:01.275094 env[1213]: 2025-07-14 21:59:01.222 [INFO][4353] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" Jul 14 21:59:01.275094 env[1213]: 2025-07-14 21:59:01.222 [INFO][4353] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" iface="eth0" netns="/var/run/netns/cni-8dc93286-6113-f332-6f3d-1a805d0d043b" Jul 14 21:59:01.275094 env[1213]: 2025-07-14 21:59:01.222 [INFO][4353] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" iface="eth0" netns="/var/run/netns/cni-8dc93286-6113-f332-6f3d-1a805d0d043b" Jul 14 21:59:01.275094 env[1213]: 2025-07-14 21:59:01.222 [INFO][4353] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" iface="eth0" netns="/var/run/netns/cni-8dc93286-6113-f332-6f3d-1a805d0d043b" Jul 14 21:59:01.275094 env[1213]: 2025-07-14 21:59:01.222 [INFO][4353] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" Jul 14 21:59:01.275094 env[1213]: 2025-07-14 21:59:01.222 [INFO][4353] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" Jul 14 21:59:01.275094 env[1213]: 2025-07-14 21:59:01.245 [INFO][4371] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" HandleID="k8s-pod-network.27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" Workload="localhost-k8s-coredns--7c65d6cfc9--b5jln-eth0" Jul 14 21:59:01.275094 env[1213]: 2025-07-14 21:59:01.245 [INFO][4371] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:59:01.275094 env[1213]: 2025-07-14 21:59:01.254 [INFO][4371] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:59:01.275094 env[1213]: 2025-07-14 21:59:01.267 [WARNING][4371] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" HandleID="k8s-pod-network.27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" Workload="localhost-k8s-coredns--7c65d6cfc9--b5jln-eth0" Jul 14 21:59:01.275094 env[1213]: 2025-07-14 21:59:01.268 [INFO][4371] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" HandleID="k8s-pod-network.27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" Workload="localhost-k8s-coredns--7c65d6cfc9--b5jln-eth0" Jul 14 21:59:01.275094 env[1213]: 2025-07-14 21:59:01.271 [INFO][4371] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:59:01.275094 env[1213]: 2025-07-14 21:59:01.273 [INFO][4353] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" Jul 14 21:59:01.278004 env[1213]: time="2025-07-14T21:59:01.277961296Z" level=info msg="TearDown network for sandbox \"27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314\" successfully" Jul 14 21:59:01.278126 env[1213]: time="2025-07-14T21:59:01.278107137Z" level=info msg="StopPodSandbox for \"27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314\" returns successfully" Jul 14 21:59:01.278727 kubelet[1982]: E0714 21:59:01.278501 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:59:01.279116 env[1213]: time="2025-07-14T21:59:01.279082502Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-b5jln,Uid:2aa81a5c-ff84-4a72-ac44-ad3807eb290a,Namespace:kube-system,Attempt:1,}" Jul 14 21:59:01.280181 systemd[1]: run-netns-cni\x2d8dc93286\x2d6113\x2df332\x2d6f3d\x2d1a805d0d043b.mount: Deactivated successfully. Jul 14 21:59:01.500230 env[1213]: time="2025-07-14T21:59:01.500181427Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:59:01.502921 env[1213]: time="2025-07-14T21:59:01.502776240Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:59:01.502817 systemd-networkd[1047]: cali3d1c3d8638c: Link UP Jul 14 21:59:01.504349 systemd-networkd[1047]: cali3d1c3d8638c: Gained carrier Jul 14 21:59:01.504940 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali3d1c3d8638c: link becomes ready Jul 14 21:59:01.507795 env[1213]: time="2025-07-14T21:59:01.507678545Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:59:01.512391 env[1213]: time="2025-07-14T21:59:01.510069517Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:59:01.512391 env[1213]: time="2025-07-14T21:59:01.511183203Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Jul 14 21:59:01.513916 env[1213]: time="2025-07-14T21:59:01.513843817Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 14 21:59:01.514652 env[1213]: time="2025-07-14T21:59:01.514618661Z" level=info msg="CreateContainer within sandbox \"663a301a78dbba12d9110cc60974456640fc7a6f390be5164a56fbddddf37160\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 14 21:59:01.520583 env[1213]: 2025-07-14 21:59:01.357 [INFO][4383] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 14 21:59:01.520583 env[1213]: 2025-07-14 21:59:01.373 [INFO][4383] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7c65d6cfc9--b5jln-eth0 coredns-7c65d6cfc9- kube-system 2aa81a5c-ff84-4a72-ac44-ad3807eb290a 973 0 2025-07-14 21:58:19 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7c65d6cfc9-b5jln eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali3d1c3d8638c [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="cbbd47c5622e61cf90c6ea88b719f4e5a67a6db023c6158c8fcb9d4535a9f22e" Namespace="kube-system" Pod="coredns-7c65d6cfc9-b5jln" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--b5jln-" Jul 14 21:59:01.520583 env[1213]: 2025-07-14 21:59:01.373 [INFO][4383] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="cbbd47c5622e61cf90c6ea88b719f4e5a67a6db023c6158c8fcb9d4535a9f22e" Namespace="kube-system" Pod="coredns-7c65d6cfc9-b5jln" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--b5jln-eth0" Jul 14 21:59:01.520583 env[1213]: 2025-07-14 21:59:01.440 [INFO][4410] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="cbbd47c5622e61cf90c6ea88b719f4e5a67a6db023c6158c8fcb9d4535a9f22e" HandleID="k8s-pod-network.cbbd47c5622e61cf90c6ea88b719f4e5a67a6db023c6158c8fcb9d4535a9f22e" Workload="localhost-k8s-coredns--7c65d6cfc9--b5jln-eth0" Jul 14 21:59:01.520583 env[1213]: 2025-07-14 21:59:01.440 [INFO][4410] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="cbbd47c5622e61cf90c6ea88b719f4e5a67a6db023c6158c8fcb9d4535a9f22e" HandleID="k8s-pod-network.cbbd47c5622e61cf90c6ea88b719f4e5a67a6db023c6158c8fcb9d4535a9f22e" Workload="localhost-k8s-coredns--7c65d6cfc9--b5jln-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004ce00), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7c65d6cfc9-b5jln", "timestamp":"2025-07-14 21:59:01.440749605 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 21:59:01.520583 env[1213]: 2025-07-14 21:59:01.441 [INFO][4410] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:59:01.520583 env[1213]: 2025-07-14 21:59:01.441 [INFO][4410] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:59:01.520583 env[1213]: 2025-07-14 21:59:01.441 [INFO][4410] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 21:59:01.520583 env[1213]: 2025-07-14 21:59:01.460 [INFO][4410] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.cbbd47c5622e61cf90c6ea88b719f4e5a67a6db023c6158c8fcb9d4535a9f22e" host="localhost" Jul 14 21:59:01.520583 env[1213]: 2025-07-14 21:59:01.466 [INFO][4410] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 21:59:01.520583 env[1213]: 2025-07-14 21:59:01.472 [INFO][4410] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 21:59:01.520583 env[1213]: 2025-07-14 21:59:01.476 [INFO][4410] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 21:59:01.520583 env[1213]: 2025-07-14 21:59:01.480 [INFO][4410] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 21:59:01.520583 env[1213]: 2025-07-14 21:59:01.480 [INFO][4410] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.cbbd47c5622e61cf90c6ea88b719f4e5a67a6db023c6158c8fcb9d4535a9f22e" host="localhost" Jul 14 21:59:01.520583 env[1213]: 2025-07-14 21:59:01.482 [INFO][4410] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.cbbd47c5622e61cf90c6ea88b719f4e5a67a6db023c6158c8fcb9d4535a9f22e Jul 14 21:59:01.520583 env[1213]: 2025-07-14 21:59:01.492 [INFO][4410] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.cbbd47c5622e61cf90c6ea88b719f4e5a67a6db023c6158c8fcb9d4535a9f22e" host="localhost" Jul 14 21:59:01.520583 env[1213]: 2025-07-14 21:59:01.498 [INFO][4410] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.cbbd47c5622e61cf90c6ea88b719f4e5a67a6db023c6158c8fcb9d4535a9f22e" host="localhost" Jul 14 21:59:01.520583 env[1213]: 2025-07-14 21:59:01.498 [INFO][4410] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.cbbd47c5622e61cf90c6ea88b719f4e5a67a6db023c6158c8fcb9d4535a9f22e" host="localhost" Jul 14 21:59:01.520583 env[1213]: 2025-07-14 21:59:01.498 [INFO][4410] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:59:01.520583 env[1213]: 2025-07-14 21:59:01.498 [INFO][4410] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="cbbd47c5622e61cf90c6ea88b719f4e5a67a6db023c6158c8fcb9d4535a9f22e" HandleID="k8s-pod-network.cbbd47c5622e61cf90c6ea88b719f4e5a67a6db023c6158c8fcb9d4535a9f22e" Workload="localhost-k8s-coredns--7c65d6cfc9--b5jln-eth0" Jul 14 21:59:01.521210 env[1213]: 2025-07-14 21:59:01.501 [INFO][4383] cni-plugin/k8s.go 418: Populated endpoint ContainerID="cbbd47c5622e61cf90c6ea88b719f4e5a67a6db023c6158c8fcb9d4535a9f22e" Namespace="kube-system" Pod="coredns-7c65d6cfc9-b5jln" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--b5jln-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--b5jln-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"2aa81a5c-ff84-4a72-ac44-ad3807eb290a", ResourceVersion:"973", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7c65d6cfc9-b5jln", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3d1c3d8638c", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:59:01.521210 env[1213]: 2025-07-14 21:59:01.501 [INFO][4383] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="cbbd47c5622e61cf90c6ea88b719f4e5a67a6db023c6158c8fcb9d4535a9f22e" Namespace="kube-system" Pod="coredns-7c65d6cfc9-b5jln" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--b5jln-eth0" Jul 14 21:59:01.521210 env[1213]: 2025-07-14 21:59:01.501 [INFO][4383] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali3d1c3d8638c ContainerID="cbbd47c5622e61cf90c6ea88b719f4e5a67a6db023c6158c8fcb9d4535a9f22e" Namespace="kube-system" Pod="coredns-7c65d6cfc9-b5jln" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--b5jln-eth0" Jul 14 21:59:01.521210 env[1213]: 2025-07-14 21:59:01.506 [INFO][4383] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="cbbd47c5622e61cf90c6ea88b719f4e5a67a6db023c6158c8fcb9d4535a9f22e" Namespace="kube-system" Pod="coredns-7c65d6cfc9-b5jln" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--b5jln-eth0" Jul 14 21:59:01.521210 env[1213]: 2025-07-14 21:59:01.507 [INFO][4383] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="cbbd47c5622e61cf90c6ea88b719f4e5a67a6db023c6158c8fcb9d4535a9f22e" Namespace="kube-system" Pod="coredns-7c65d6cfc9-b5jln" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--b5jln-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--b5jln-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"2aa81a5c-ff84-4a72-ac44-ad3807eb290a", ResourceVersion:"973", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"cbbd47c5622e61cf90c6ea88b719f4e5a67a6db023c6158c8fcb9d4535a9f22e", Pod:"coredns-7c65d6cfc9-b5jln", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3d1c3d8638c", MAC:"f6:57:a8:da:19:59", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:59:01.521210 env[1213]: 2025-07-14 21:59:01.518 [INFO][4383] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="cbbd47c5622e61cf90c6ea88b719f4e5a67a6db023c6158c8fcb9d4535a9f22e" Namespace="kube-system" Pod="coredns-7c65d6cfc9-b5jln" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--b5jln-eth0" Jul 14 21:59:01.529147 env[1213]: time="2025-07-14T21:59:01.529103534Z" level=info msg="CreateContainer within sandbox \"663a301a78dbba12d9110cc60974456640fc7a6f390be5164a56fbddddf37160\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"ba2e0c1b632ba1042d466677bc50acd8ee4ba0c8acc0e8a5e02745d8df2c3909\"" Jul 14 21:59:01.529795 env[1213]: time="2025-07-14T21:59:01.529771338Z" level=info msg="StartContainer for \"ba2e0c1b632ba1042d466677bc50acd8ee4ba0c8acc0e8a5e02745d8df2c3909\"" Jul 14 21:59:01.533363 env[1213]: time="2025-07-14T21:59:01.533288516Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 21:59:01.533437 env[1213]: time="2025-07-14T21:59:01.533361316Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 21:59:01.533437 env[1213]: time="2025-07-14T21:59:01.533387196Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 21:59:01.533635 env[1213]: time="2025-07-14T21:59:01.533602957Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cbbd47c5622e61cf90c6ea88b719f4e5a67a6db023c6158c8fcb9d4535a9f22e pid=4441 runtime=io.containerd.runc.v2 Jul 14 21:59:01.544784 systemd[1]: Started cri-containerd-cbbd47c5622e61cf90c6ea88b719f4e5a67a6db023c6158c8fcb9d4535a9f22e.scope. Jul 14 21:59:01.561171 systemd[1]: Started cri-containerd-ba2e0c1b632ba1042d466677bc50acd8ee4ba0c8acc0e8a5e02745d8df2c3909.scope. Jul 14 21:59:01.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.587000 audit: BPF prog-id=172 op=LOAD Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit[4454]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4441 pid=4454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.588000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362626434376335363232653631636639306336656138386237313966 Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit[4454]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4441 pid=4454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.588000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362626434376335363232653631636639306336656138386237313966 Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit: BPF prog-id=173 op=LOAD Jul 14 21:59:01.588000 audit[4454]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4441 pid=4454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.588000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362626434376335363232653631636639306336656138386237313966 Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit: BPF prog-id=174 op=LOAD Jul 14 21:59:01.588000 audit[4454]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4441 pid=4454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.588000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362626434376335363232653631636639306336656138386237313966 Jul 14 21:59:01.588000 audit: BPF prog-id=174 op=UNLOAD Jul 14 21:59:01.588000 audit: BPF prog-id=173 op=UNLOAD Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.588000 audit: BPF prog-id=175 op=LOAD Jul 14 21:59:01.588000 audit[4454]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4441 pid=4454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.588000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362626434376335363232653631636639306336656138386237313966 Jul 14 21:59:01.592172 systemd-resolved[1155]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 21:59:01.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.595000 audit: BPF prog-id=176 op=LOAD Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit[4463]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3820 pid=4463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261326530633162363332626131303432643436363637376263353061 Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit[4463]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3820 pid=4463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261326530633162363332626131303432643436363637376263353061 Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit: BPF prog-id=177 op=LOAD Jul 14 21:59:01.596000 audit[4463]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3820 pid=4463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261326530633162363332626131303432643436363637376263353061 Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit: BPF prog-id=178 op=LOAD Jul 14 21:59:01.596000 audit[4463]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3820 pid=4463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261326530633162363332626131303432643436363637376263353061 Jul 14 21:59:01.596000 audit: BPF prog-id=178 op=UNLOAD Jul 14 21:59:01.596000 audit: BPF prog-id=177 op=UNLOAD Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { perfmon } for pid=4463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit[4463]: AVC avc: denied { bpf } for pid=4463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.596000 audit: BPF prog-id=179 op=LOAD Jul 14 21:59:01.596000 audit[4463]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3820 pid=4463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261326530633162363332626131303432643436363637376263353061 Jul 14 21:59:01.612696 env[1213]: time="2025-07-14T21:59:01.612646240Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-b5jln,Uid:2aa81a5c-ff84-4a72-ac44-ad3807eb290a,Namespace:kube-system,Attempt:1,} returns sandbox id \"cbbd47c5622e61cf90c6ea88b719f4e5a67a6db023c6158c8fcb9d4535a9f22e\"" Jul 14 21:59:01.615538 kubelet[1982]: E0714 21:59:01.615509 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:59:01.619365 env[1213]: time="2025-07-14T21:59:01.619322874Z" level=info msg="CreateContainer within sandbox \"cbbd47c5622e61cf90c6ea88b719f4e5a67a6db023c6158c8fcb9d4535a9f22e\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 14 21:59:01.627398 systemd-networkd[1047]: cali8b9894c3d2d: Link UP Jul 14 21:59:01.629569 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 14 21:59:01.630075 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali8b9894c3d2d: link becomes ready Jul 14 21:59:01.629811 systemd-networkd[1047]: cali8b9894c3d2d: Gained carrier Jul 14 21:59:01.640131 env[1213]: time="2025-07-14T21:59:01.639991499Z" level=info msg="StartContainer for \"ba2e0c1b632ba1042d466677bc50acd8ee4ba0c8acc0e8a5e02745d8df2c3909\" returns successfully" Jul 14 21:59:01.641888 env[1213]: time="2025-07-14T21:59:01.641825068Z" level=info msg="CreateContainer within sandbox \"cbbd47c5622e61cf90c6ea88b719f4e5a67a6db023c6158c8fcb9d4535a9f22e\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"c03c80140835b7703e43679e40e494b4e76f28ed05889441dc28e7615ec93273\"" Jul 14 21:59:01.646067 env[1213]: time="2025-07-14T21:59:01.644434921Z" level=info msg="StartContainer for \"c03c80140835b7703e43679e40e494b4e76f28ed05889441dc28e7615ec93273\"" Jul 14 21:59:01.650574 env[1213]: 2025-07-14 21:59:01.366 [INFO][4381] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 14 21:59:01.650574 env[1213]: 2025-07-14 21:59:01.381 [INFO][4381] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7c65d6cfc9--hk8zv-eth0 coredns-7c65d6cfc9- kube-system 4411d551-971a-4801-a959-d2959312b095 972 0 2025-07-14 21:58:19 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7c65d6cfc9-hk8zv eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali8b9894c3d2d [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="7bcc79297ee90208056f530471daaeca5862d9857bd17977bb1d25e2ef03aae2" Namespace="kube-system" Pod="coredns-7c65d6cfc9-hk8zv" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--hk8zv-" Jul 14 21:59:01.650574 env[1213]: 2025-07-14 21:59:01.381 [INFO][4381] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="7bcc79297ee90208056f530471daaeca5862d9857bd17977bb1d25e2ef03aae2" Namespace="kube-system" Pod="coredns-7c65d6cfc9-hk8zv" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--hk8zv-eth0" Jul 14 21:59:01.650574 env[1213]: 2025-07-14 21:59:01.444 [INFO][4416] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="7bcc79297ee90208056f530471daaeca5862d9857bd17977bb1d25e2ef03aae2" HandleID="k8s-pod-network.7bcc79297ee90208056f530471daaeca5862d9857bd17977bb1d25e2ef03aae2" Workload="localhost-k8s-coredns--7c65d6cfc9--hk8zv-eth0" Jul 14 21:59:01.650574 env[1213]: 2025-07-14 21:59:01.444 [INFO][4416] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="7bcc79297ee90208056f530471daaeca5862d9857bd17977bb1d25e2ef03aae2" HandleID="k8s-pod-network.7bcc79297ee90208056f530471daaeca5862d9857bd17977bb1d25e2ef03aae2" Workload="localhost-k8s-coredns--7c65d6cfc9--hk8zv-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002e5ce0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7c65d6cfc9-hk8zv", "timestamp":"2025-07-14 21:59:01.444755785 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 21:59:01.650574 env[1213]: 2025-07-14 21:59:01.445 [INFO][4416] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:59:01.650574 env[1213]: 2025-07-14 21:59:01.498 [INFO][4416] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:59:01.650574 env[1213]: 2025-07-14 21:59:01.499 [INFO][4416] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 21:59:01.650574 env[1213]: 2025-07-14 21:59:01.566 [INFO][4416] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.7bcc79297ee90208056f530471daaeca5862d9857bd17977bb1d25e2ef03aae2" host="localhost" Jul 14 21:59:01.650574 env[1213]: 2025-07-14 21:59:01.578 [INFO][4416] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 21:59:01.650574 env[1213]: 2025-07-14 21:59:01.591 [INFO][4416] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 21:59:01.650574 env[1213]: 2025-07-14 21:59:01.593 [INFO][4416] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 21:59:01.650574 env[1213]: 2025-07-14 21:59:01.598 [INFO][4416] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 21:59:01.650574 env[1213]: 2025-07-14 21:59:01.598 [INFO][4416] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.7bcc79297ee90208056f530471daaeca5862d9857bd17977bb1d25e2ef03aae2" host="localhost" Jul 14 21:59:01.650574 env[1213]: 2025-07-14 21:59:01.601 [INFO][4416] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.7bcc79297ee90208056f530471daaeca5862d9857bd17977bb1d25e2ef03aae2 Jul 14 21:59:01.650574 env[1213]: 2025-07-14 21:59:01.608 [INFO][4416] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.7bcc79297ee90208056f530471daaeca5862d9857bd17977bb1d25e2ef03aae2" host="localhost" Jul 14 21:59:01.650574 env[1213]: 2025-07-14 21:59:01.616 [INFO][4416] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.7bcc79297ee90208056f530471daaeca5862d9857bd17977bb1d25e2ef03aae2" host="localhost" Jul 14 21:59:01.650574 env[1213]: 2025-07-14 21:59:01.616 [INFO][4416] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.7bcc79297ee90208056f530471daaeca5862d9857bd17977bb1d25e2ef03aae2" host="localhost" Jul 14 21:59:01.650574 env[1213]: 2025-07-14 21:59:01.616 [INFO][4416] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:59:01.650574 env[1213]: 2025-07-14 21:59:01.616 [INFO][4416] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="7bcc79297ee90208056f530471daaeca5862d9857bd17977bb1d25e2ef03aae2" HandleID="k8s-pod-network.7bcc79297ee90208056f530471daaeca5862d9857bd17977bb1d25e2ef03aae2" Workload="localhost-k8s-coredns--7c65d6cfc9--hk8zv-eth0" Jul 14 21:59:01.651162 env[1213]: 2025-07-14 21:59:01.624 [INFO][4381] cni-plugin/k8s.go 418: Populated endpoint ContainerID="7bcc79297ee90208056f530471daaeca5862d9857bd17977bb1d25e2ef03aae2" Namespace="kube-system" Pod="coredns-7c65d6cfc9-hk8zv" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--hk8zv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--hk8zv-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"4411d551-971a-4801-a959-d2959312b095", ResourceVersion:"972", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7c65d6cfc9-hk8zv", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali8b9894c3d2d", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:59:01.651162 env[1213]: 2025-07-14 21:59:01.624 [INFO][4381] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="7bcc79297ee90208056f530471daaeca5862d9857bd17977bb1d25e2ef03aae2" Namespace="kube-system" Pod="coredns-7c65d6cfc9-hk8zv" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--hk8zv-eth0" Jul 14 21:59:01.651162 env[1213]: 2025-07-14 21:59:01.624 [INFO][4381] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali8b9894c3d2d ContainerID="7bcc79297ee90208056f530471daaeca5862d9857bd17977bb1d25e2ef03aae2" Namespace="kube-system" Pod="coredns-7c65d6cfc9-hk8zv" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--hk8zv-eth0" Jul 14 21:59:01.651162 env[1213]: 2025-07-14 21:59:01.630 [INFO][4381] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="7bcc79297ee90208056f530471daaeca5862d9857bd17977bb1d25e2ef03aae2" Namespace="kube-system" Pod="coredns-7c65d6cfc9-hk8zv" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--hk8zv-eth0" Jul 14 21:59:01.651162 env[1213]: 2025-07-14 21:59:01.634 [INFO][4381] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="7bcc79297ee90208056f530471daaeca5862d9857bd17977bb1d25e2ef03aae2" Namespace="kube-system" Pod="coredns-7c65d6cfc9-hk8zv" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--hk8zv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--hk8zv-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"4411d551-971a-4801-a959-d2959312b095", ResourceVersion:"972", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7bcc79297ee90208056f530471daaeca5862d9857bd17977bb1d25e2ef03aae2", Pod:"coredns-7c65d6cfc9-hk8zv", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali8b9894c3d2d", MAC:"f6:fe:43:eb:4a:b9", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:59:01.651162 env[1213]: 2025-07-14 21:59:01.647 [INFO][4381] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="7bcc79297ee90208056f530471daaeca5862d9857bd17977bb1d25e2ef03aae2" Namespace="kube-system" Pod="coredns-7c65d6cfc9-hk8zv" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--hk8zv-eth0" Jul 14 21:59:01.661752 systemd[1]: Started cri-containerd-c03c80140835b7703e43679e40e494b4e76f28ed05889441dc28e7615ec93273.scope. Jul 14 21:59:01.665182 env[1213]: time="2025-07-14T21:59:01.664968146Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 21:59:01.665182 env[1213]: time="2025-07-14T21:59:01.665013186Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 21:59:01.665182 env[1213]: time="2025-07-14T21:59:01.665023666Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 21:59:01.665345 env[1213]: time="2025-07-14T21:59:01.665184507Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7bcc79297ee90208056f530471daaeca5862d9857bd17977bb1d25e2ef03aae2 pid=4538 runtime=io.containerd.runc.v2 Jul 14 21:59:01.695032 systemd[1]: Started cri-containerd-7bcc79297ee90208056f530471daaeca5862d9857bd17977bb1d25e2ef03aae2.scope. Jul 14 21:59:01.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.706000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.706000 audit: BPF prog-id=180 op=LOAD Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit[4522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4441 pid=4522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.707000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330336338303134303833356237373033653433363739653430653439 Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit[4522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4441 pid=4522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.707000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330336338303134303833356237373033653433363739653430653439 Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit: BPF prog-id=181 op=LOAD Jul 14 21:59:01.707000 audit[4522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4441 pid=4522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.707000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330336338303134303833356237373033653433363739653430653439 Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit: BPF prog-id=182 op=LOAD Jul 14 21:59:01.707000 audit[4522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4441 pid=4522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.707000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330336338303134303833356237373033653433363739653430653439 Jul 14 21:59:01.707000 audit: BPF prog-id=182 op=UNLOAD Jul 14 21:59:01.707000 audit: BPF prog-id=181 op=UNLOAD Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.707000 audit: BPF prog-id=183 op=LOAD Jul 14 21:59:01.707000 audit[4522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4441 pid=4522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.707000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330336338303134303833356237373033653433363739653430653439 Jul 14 21:59:01.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.726000 audit: BPF prog-id=184 op=LOAD Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit[4555]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4538 pid=4555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.727000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762636337393239376565393032303830353666353330343731646161 Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit[4555]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4538 pid=4555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.727000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762636337393239376565393032303830353666353330343731646161 Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit: BPF prog-id=185 op=LOAD Jul 14 21:59:01.727000 audit[4555]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4538 pid=4555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.727000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762636337393239376565393032303830353666353330343731646161 Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit: BPF prog-id=186 op=LOAD Jul 14 21:59:01.727000 audit[4555]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4538 pid=4555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.727000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762636337393239376565393032303830353666353330343731646161 Jul 14 21:59:01.727000 audit: BPF prog-id=186 op=UNLOAD Jul 14 21:59:01.727000 audit: BPF prog-id=185 op=UNLOAD Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.727000 audit: BPF prog-id=187 op=LOAD Jul 14 21:59:01.727000 audit[4555]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4538 pid=4555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.727000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762636337393239376565393032303830353666353330343731646161 Jul 14 21:59:01.733059 systemd-resolved[1155]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 21:59:01.739568 env[1213]: time="2025-07-14T21:59:01.739505085Z" level=info msg="StartContainer for \"c03c80140835b7703e43679e40e494b4e76f28ed05889441dc28e7615ec93273\" returns successfully" Jul 14 21:59:01.753765 env[1213]: time="2025-07-14T21:59:01.753638437Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-hk8zv,Uid:4411d551-971a-4801-a959-d2959312b095,Namespace:kube-system,Attempt:1,} returns sandbox id \"7bcc79297ee90208056f530471daaeca5862d9857bd17977bb1d25e2ef03aae2\"" Jul 14 21:59:01.754781 kubelet[1982]: E0714 21:59:01.754744 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:59:01.760264 env[1213]: time="2025-07-14T21:59:01.760159470Z" level=info msg="CreateContainer within sandbox \"7bcc79297ee90208056f530471daaeca5862d9857bd17977bb1d25e2ef03aae2\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 14 21:59:01.777642 env[1213]: time="2025-07-14T21:59:01.777589279Z" level=info msg="CreateContainer within sandbox \"7bcc79297ee90208056f530471daaeca5862d9857bd17977bb1d25e2ef03aae2\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"059b1089aef07e162768a0f52ea6088cdb7053f6720f109c5222b6d699734e60\"" Jul 14 21:59:01.778601 env[1213]: time="2025-07-14T21:59:01.778564724Z" level=info msg="StartContainer for \"059b1089aef07e162768a0f52ea6088cdb7053f6720f109c5222b6d699734e60\"" Jul 14 21:59:01.813043 systemd[1]: Started cri-containerd-059b1089aef07e162768a0f52ea6088cdb7053f6720f109c5222b6d699734e60.scope. Jul 14 21:59:01.837923 env[1213]: time="2025-07-14T21:59:01.837405704Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:59:01.840077 env[1213]: time="2025-07-14T21:59:01.840039157Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:59:01.842083 env[1213]: time="2025-07-14T21:59:01.842037007Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:59:01.851916 env[1213]: time="2025-07-14T21:59:01.851849417Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:59:01.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.852000 audit: BPF prog-id=188 op=LOAD Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { bpf } for pid=4616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit[4616]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=4538 pid=4616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035396231303839616566303765313632373638613066353265613630 Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit[4616]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=4538 pid=4616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035396231303839616566303765313632373638613066353265613630 Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { bpf } for pid=4616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { bpf } for pid=4616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { bpf } for pid=4616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { bpf } for pid=4616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { bpf } for pid=4616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit: BPF prog-id=189 op=LOAD Jul 14 21:59:01.853000 audit[4616]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=4538 pid=4616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035396231303839616566303765313632373638613066353265613630 Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { bpf } for pid=4616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { bpf } for pid=4616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { bpf } for pid=4616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { bpf } for pid=4616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit: BPF prog-id=190 op=LOAD Jul 14 21:59:01.853000 audit[4616]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=4538 pid=4616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035396231303839616566303765313632373638613066353265613630 Jul 14 21:59:01.853000 audit: BPF prog-id=190 op=UNLOAD Jul 14 21:59:01.853000 audit: BPF prog-id=189 op=UNLOAD Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { bpf } for pid=4616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { bpf } for pid=4616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { bpf } for pid=4616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { bpf } for pid=4616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit[4616]: AVC avc: denied { bpf } for pid=4616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.853000 audit: BPF prog-id=191 op=LOAD Jul 14 21:59:01.853000 audit[4616]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=4538 pid=4616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035396231303839616566303765313632373638613066353265613630 Jul 14 21:59:01.856918 env[1213]: time="2025-07-14T21:59:01.855575356Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Jul 14 21:59:01.858145 env[1213]: time="2025-07-14T21:59:01.858118529Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 14 21:59:01.859140 env[1213]: time="2025-07-14T21:59:01.859102174Z" level=info msg="CreateContainer within sandbox \"c64dab505d847ec354ef99ad2f4a94f0c5b146063092fc9d995bf6286ab4608d\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 14 21:59:01.877669 env[1213]: time="2025-07-14T21:59:01.877608748Z" level=info msg="StartContainer for \"059b1089aef07e162768a0f52ea6088cdb7053f6720f109c5222b6d699734e60\" returns successfully" Jul 14 21:59:01.888833 env[1213]: time="2025-07-14T21:59:01.888787645Z" level=info msg="CreateContainer within sandbox \"c64dab505d847ec354ef99ad2f4a94f0c5b146063092fc9d995bf6286ab4608d\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"5161caaec8f1a863e18c3e2c40142c520dfd3e339ed313d6d6a34ca2d02ab158\"" Jul 14 21:59:01.892477 env[1213]: time="2025-07-14T21:59:01.889604849Z" level=info msg="StartContainer for \"5161caaec8f1a863e18c3e2c40142c520dfd3e339ed313d6d6a34ca2d02ab158\"" Jul 14 21:59:01.895000 audit[4632]: AVC avc: denied { getattr } for pid=4632 comm="coredns" path="cgroup:[4026532565]" dev="nsfs" ino=4026532565 scontext=system_u:system_r:svirt_lxc_net_t:s0:c279,c935 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 14 21:59:01.895000 audit[4632]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000154810 a2=40000a4578 a3=0 items=0 ppid=4538 pid=4632 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c279,c935 key=(null) Jul 14 21:59:01.895000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 14 21:59:01.896000 audit[4548]: AVC avc: denied { getattr } for pid=4548 comm="coredns" path="cgroup:[4026532558]" dev="nsfs" ino=4026532558 scontext=system_u:system_r:svirt_lxc_net_t:s0:c355,c1006 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 14 21:59:01.896000 audit[4548]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=40000568d0 a2=4000158578 a3=0 items=0 ppid=4441 pid=4548 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c355,c1006 key=(null) Jul 14 21:59:01.896000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 14 21:59:01.897471 systemd-networkd[1047]: calia60046d79da: Gained IPv6LL Jul 14 21:59:01.919954 systemd[1]: Started cri-containerd-5161caaec8f1a863e18c3e2c40142c520dfd3e339ed313d6d6a34ca2d02ab158.scope. Jul 14 21:59:01.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.941000 audit: BPF prog-id=192 op=LOAD Jul 14 21:59:01.942000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.942000 audit[4661]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3938 pid=4661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.942000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531363163616165633866316138363365313863336532633430313432 Jul 14 21:59:01.942000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.942000 audit[4661]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3938 pid=4661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.942000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531363163616165633866316138363365313863336532633430313432 Jul 14 21:59:01.942000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.942000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.942000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.942000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.942000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.942000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.942000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.942000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.942000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.942000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.942000 audit: BPF prog-id=193 op=LOAD Jul 14 21:59:01.942000 audit[4661]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3938 pid=4661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.942000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531363163616165633866316138363365313863336532633430313432 Jul 14 21:59:01.943000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.943000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.943000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.943000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.943000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.943000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.943000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.943000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.943000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.943000 audit: BPF prog-id=194 op=LOAD Jul 14 21:59:01.943000 audit[4661]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3938 pid=4661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.943000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531363163616165633866316138363365313863336532633430313432 Jul 14 21:59:01.943000 audit: BPF prog-id=194 op=UNLOAD Jul 14 21:59:01.943000 audit: BPF prog-id=193 op=UNLOAD Jul 14 21:59:01.944000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.944000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.944000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.944000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.944000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.944000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.944000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.944000 audit[4661]: AVC avc: denied { perfmon } for pid=4661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.944000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.944000 audit[4661]: AVC avc: denied { bpf } for pid=4661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:01.944000 audit: BPF prog-id=195 op=LOAD Jul 14 21:59:01.944000 audit[4661]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3938 pid=4661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:01.944000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531363163616165633866316138363365313863336532633430313432 Jul 14 21:59:01.972416 env[1213]: time="2025-07-14T21:59:01.972374631Z" level=info msg="StartContainer for \"5161caaec8f1a863e18c3e2c40142c520dfd3e339ed313d6d6a34ca2d02ab158\" returns successfully" Jul 14 21:59:02.281029 systemd-networkd[1047]: cali45772671ac6: Gained IPv6LL Jul 14 21:59:02.327389 kubelet[1982]: E0714 21:59:02.327352 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:59:02.333590 kubelet[1982]: E0714 21:59:02.333544 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:59:02.357000 audit[4703]: NETFILTER_CFG table=filter:101 family=2 entries=20 op=nft_register_rule pid=4703 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:59:02.357000 audit[4703]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffee01ac10 a2=0 a3=1 items=0 ppid=2082 pid=4703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:02.357000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:59:02.360135 kubelet[1982]: I0714 21:59:02.360067 1982 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-b5jln" podStartSLOduration=43.360049096 podStartE2EDuration="43.360049096s" podCreationTimestamp="2025-07-14 21:58:19 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 21:59:02.346522664 +0000 UTC m=+49.282321367" watchObservedRunningTime="2025-07-14 21:59:02.360049096 +0000 UTC m=+49.295847679" Jul 14 21:59:02.369881 kubelet[1982]: I0714 21:59:02.369807 1982 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-5789c98db4-qmxz9" podStartSLOduration=27.344744058 podStartE2EDuration="30.369791908s" podCreationTimestamp="2025-07-14 21:58:32 +0000 UTC" firstStartedPulling="2025-07-14 21:58:58.488252524 +0000 UTC m=+45.424051067" lastFinishedPulling="2025-07-14 21:59:01.513300294 +0000 UTC m=+48.449098917" observedRunningTime="2025-07-14 21:59:02.369047544 +0000 UTC m=+49.304846127" watchObservedRunningTime="2025-07-14 21:59:02.369791908 +0000 UTC m=+49.305590491" Jul 14 21:59:02.376000 audit[4703]: NETFILTER_CFG table=nat:102 family=2 entries=14 op=nft_register_rule pid=4703 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:59:02.376000 audit[4703]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffee01ac10 a2=0 a3=1 items=0 ppid=2082 pid=4703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:02.376000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:59:02.396060 kubelet[1982]: I0714 21:59:02.396000 1982 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-hk8zv" podStartSLOduration=43.395971848 podStartE2EDuration="43.395971848s" podCreationTimestamp="2025-07-14 21:58:19 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 21:59:02.379677561 +0000 UTC m=+49.315476144" watchObservedRunningTime="2025-07-14 21:59:02.395971848 +0000 UTC m=+49.331770431" Jul 14 21:59:02.401000 audit[4705]: NETFILTER_CFG table=filter:103 family=2 entries=17 op=nft_register_rule pid=4705 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:59:02.401000 audit[4705]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffedf687d0 a2=0 a3=1 items=0 ppid=2082 pid=4705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:02.401000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:59:02.419000 audit[4705]: NETFILTER_CFG table=nat:104 family=2 entries=47 op=nft_register_chain pid=4705 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:59:02.419000 audit[4705]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19860 a0=3 a1=ffffedf687d0 a2=0 a3=1 items=0 ppid=2082 pid=4705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:02.419000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:59:02.542791 kubelet[1982]: I0714 21:59:02.542687 1982 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 21:59:02.543080 kubelet[1982]: E0714 21:59:02.543052 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:59:02.567550 kubelet[1982]: I0714 21:59:02.567476 1982 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-5789c98db4-s57m5" podStartSLOduration=28.298357625 podStartE2EDuration="30.567457725s" podCreationTimestamp="2025-07-14 21:58:32 +0000 UTC" firstStartedPulling="2025-07-14 21:58:59.587832303 +0000 UTC m=+46.523630886" lastFinishedPulling="2025-07-14 21:59:01.856932443 +0000 UTC m=+48.792730986" observedRunningTime="2025-07-14 21:59:02.397883979 +0000 UTC m=+49.333682602" watchObservedRunningTime="2025-07-14 21:59:02.567457725 +0000 UTC m=+49.503256308" Jul 14 21:59:02.884034 env[1213]: time="2025-07-14T21:59:02.883926658Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:59:02.885698 env[1213]: time="2025-07-14T21:59:02.885657867Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:59:02.887425 env[1213]: time="2025-07-14T21:59:02.887396476Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:59:02.889032 env[1213]: time="2025-07-14T21:59:02.888993125Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:59:02.889596 env[1213]: time="2025-07-14T21:59:02.889559808Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2\"" Jul 14 21:59:02.891027 env[1213]: time="2025-07-14T21:59:02.890988415Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 14 21:59:02.891855 env[1213]: time="2025-07-14T21:59:02.891828460Z" level=info msg="CreateContainer within sandbox \"a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 14 21:59:02.908351 env[1213]: time="2025-07-14T21:59:02.907876266Z" level=info msg="CreateContainer within sandbox \"a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"8d6fa97d4cdbf6610cf18964139cd54480659090bf4a3cd62565f9c070134c70\"" Jul 14 21:59:02.909960 env[1213]: time="2025-07-14T21:59:02.908874671Z" level=info msg="StartContainer for \"8d6fa97d4cdbf6610cf18964139cd54480659090bf4a3cd62565f9c070134c70\"" Jul 14 21:59:02.939724 systemd[1]: Started cri-containerd-8d6fa97d4cdbf6610cf18964139cd54480659090bf4a3cd62565f9c070134c70.scope. Jul 14 21:59:02.965000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.965000 audit[4716]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4225 pid=4716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:02.965000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864366661393764346364626636363130636631383936343133396364 Jul 14 21:59:02.966000 audit[4716]: AVC avc: denied { bpf } for pid=4716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.966000 audit[4716]: AVC avc: denied { bpf } for pid=4716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.966000 audit[4716]: AVC avc: denied { bpf } for pid=4716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.966000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.966000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.966000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.966000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.966000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.966000 audit[4716]: AVC avc: denied { bpf } for pid=4716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.966000 audit[4716]: AVC avc: denied { bpf } for pid=4716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.966000 audit: BPF prog-id=196 op=LOAD Jul 14 21:59:02.966000 audit[4716]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4225 pid=4716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:02.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864366661393764346364626636363130636631383936343133396364 Jul 14 21:59:02.966000 audit[4716]: AVC avc: denied { bpf } for pid=4716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.966000 audit[4716]: AVC avc: denied { bpf } for pid=4716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.966000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.966000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.966000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.966000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.966000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.966000 audit[4716]: AVC avc: denied { bpf } for pid=4716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.966000 audit[4716]: AVC avc: denied { bpf } for pid=4716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.966000 audit: BPF prog-id=197 op=LOAD Jul 14 21:59:02.966000 audit[4716]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4225 pid=4716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:02.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864366661393764346364626636363130636631383936343133396364 Jul 14 21:59:02.966000 audit: BPF prog-id=197 op=UNLOAD Jul 14 21:59:02.966000 audit: BPF prog-id=196 op=UNLOAD Jul 14 21:59:02.966000 audit[4716]: AVC avc: denied { bpf } for pid=4716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.966000 audit[4716]: AVC avc: denied { bpf } for pid=4716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.966000 audit[4716]: AVC avc: denied { bpf } for pid=4716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.966000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.966000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.966000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.966000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.966000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.966000 audit[4716]: AVC avc: denied { bpf } for pid=4716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.966000 audit[4716]: AVC avc: denied { bpf } for pid=4716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:02.966000 audit: BPF prog-id=198 op=LOAD Jul 14 21:59:02.966000 audit[4716]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4225 pid=4716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:02.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864366661393764346364626636363130636631383936343133396364 Jul 14 21:59:02.984396 env[1213]: time="2025-07-14T21:59:02.984346155Z" level=info msg="StartContainer for \"8d6fa97d4cdbf6610cf18964139cd54480659090bf4a3cd62565f9c070134c70\" returns successfully" Jul 14 21:59:03.225000 audit[4674]: AVC avc: denied { watch } for pid=4674 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_21_58_45.888561458/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c507,c761 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c507,c761 tclass=file permissive=0 Jul 14 21:59:03.225000 audit[4674]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4001016480 a2=fc6 a3=0 items=0 ppid=3938 pid=4674 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c507,c761 key=(null) Jul 14 21:59:03.225000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 21:59:03.227000 audit[4486]: AVC avc: denied { watch } for pid=4486 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_21_58_45.1652973752/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c569,c758 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c569,c758 tclass=file permissive=0 Jul 14 21:59:03.227000 audit[4486]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40006fa860 a2=fc6 a3=0 items=0 ppid=3820 pid=4486 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c569,c758 key=(null) Jul 14 21:59:03.227000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 21:59:03.241007 systemd-networkd[1047]: cali8b9894c3d2d: Gained IPv6LL Jul 14 21:59:03.241963 systemd-networkd[1047]: cali3d1c3d8638c: Gained IPv6LL Jul 14 21:59:03.343439 kubelet[1982]: E0714 21:59:03.343393 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:59:03.343933 kubelet[1982]: I0714 21:59:03.343515 1982 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 21:59:03.343933 kubelet[1982]: I0714 21:59:03.343783 1982 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 21:59:03.344286 kubelet[1982]: E0714 21:59:03.344265 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:59:03.344540 kubelet[1982]: E0714 21:59:03.344521 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:59:03.358000 audit[4802]: AVC avc: denied { bpf } for pid=4802 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.358000 audit[4802]: AVC avc: denied { bpf } for pid=4802 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.358000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.358000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.358000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.358000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.358000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.358000 audit[4802]: AVC avc: denied { bpf } for pid=4802 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.358000 audit[4802]: AVC avc: denied { bpf } for pid=4802 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.358000 audit: BPF prog-id=199 op=LOAD Jul 14 21:59:03.358000 audit[4802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd1f729a8 a2=98 a3=ffffd1f72998 items=0 ppid=4783 pid=4802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.358000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 21:59:03.358000 audit: BPF prog-id=199 op=UNLOAD Jul 14 21:59:03.358000 audit[4802]: AVC avc: denied { bpf } for pid=4802 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.358000 audit[4802]: AVC avc: denied { bpf } for pid=4802 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.358000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.358000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.358000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.358000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.358000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.358000 audit[4802]: AVC avc: denied { bpf } for pid=4802 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.358000 audit[4802]: AVC avc: denied { bpf } for pid=4802 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.358000 audit: BPF prog-id=200 op=LOAD Jul 14 21:59:03.358000 audit[4802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd1f72858 a2=74 a3=95 items=0 ppid=4783 pid=4802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.358000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 21:59:03.358000 audit: BPF prog-id=200 op=UNLOAD Jul 14 21:59:03.358000 audit[4802]: AVC avc: denied { bpf } for pid=4802 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.358000 audit[4802]: AVC avc: denied { bpf } for pid=4802 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.358000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.358000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.358000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.358000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.358000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.358000 audit[4802]: AVC avc: denied { bpf } for pid=4802 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.358000 audit[4802]: AVC avc: denied { bpf } for pid=4802 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.358000 audit: BPF prog-id=201 op=LOAD Jul 14 21:59:03.358000 audit[4802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd1f72888 a2=40 a3=ffffd1f728b8 items=0 ppid=4783 pid=4802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.358000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 21:59:03.358000 audit: BPF prog-id=201 op=UNLOAD Jul 14 21:59:03.358000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.358000 audit[4802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffd1f729a0 a2=50 a3=0 items=0 ppid=4783 pid=4802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.358000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 21:59:03.368000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.368000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.368000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.368000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.368000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.368000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.368000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.368000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.368000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.368000 audit: BPF prog-id=202 op=LOAD Jul 14 21:59:03.368000 audit[4803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffdf7f048 a2=98 a3=fffffdf7f038 items=0 ppid=4783 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.368000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 21:59:03.368000 audit: BPF prog-id=202 op=UNLOAD Jul 14 21:59:03.368000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.368000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.368000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.368000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.368000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.368000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.368000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.368000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.368000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.368000 audit: BPF prog-id=203 op=LOAD Jul 14 21:59:03.368000 audit[4803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffffdf7ecd8 a2=74 a3=95 items=0 ppid=4783 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.368000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 21:59:03.368000 audit: BPF prog-id=203 op=UNLOAD Jul 14 21:59:03.368000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.368000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.368000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.368000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.368000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.368000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.368000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.368000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.368000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.368000 audit: BPF prog-id=204 op=LOAD Jul 14 21:59:03.368000 audit[4803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffffdf7ed38 a2=94 a3=2 items=0 ppid=4783 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.368000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 21:59:03.368000 audit: BPF prog-id=204 op=UNLOAD Jul 14 21:59:03.441000 audit[4806]: NETFILTER_CFG table=filter:105 family=2 entries=13 op=nft_register_rule pid=4806 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:59:03.441000 audit[4806]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffcf9dfbd0 a2=0 a3=1 items=0 ppid=2082 pid=4806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.441000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:59:03.447000 audit[4806]: NETFILTER_CFG table=nat:106 family=2 entries=27 op=nft_register_chain pid=4806 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:59:03.447000 audit[4806]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=9348 a0=3 a1=ffffcf9dfbd0 a2=0 a3=1 items=0 ppid=2082 pid=4806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.447000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:59:03.455000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.455000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.455000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.455000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.455000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.455000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.455000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.455000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.455000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.455000 audit: BPF prog-id=205 op=LOAD Jul 14 21:59:03.455000 audit[4803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffffdf7ecf8 a2=40 a3=fffffdf7ed28 items=0 ppid=4783 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.455000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 21:59:03.455000 audit: BPF prog-id=205 op=UNLOAD Jul 14 21:59:03.455000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.455000 audit[4803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=fffffdf7ee10 a2=50 a3=0 items=0 ppid=4783 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.455000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 21:59:03.463000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.463000 audit[4803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffffdf7ed68 a2=28 a3=fffffdf7ee98 items=0 ppid=4783 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.463000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffdf7ed98 a2=28 a3=fffffdf7eec8 items=0 ppid=4783 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.464000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffdf7ec48 a2=28 a3=fffffdf7ed78 items=0 ppid=4783 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.464000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffffdf7edb8 a2=28 a3=fffffdf7eee8 items=0 ppid=4783 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.464000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffffdf7ed98 a2=28 a3=fffffdf7eec8 items=0 ppid=4783 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.464000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffffdf7ed88 a2=28 a3=fffffdf7eeb8 items=0 ppid=4783 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.464000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffffdf7edb8 a2=28 a3=fffffdf7eee8 items=0 ppid=4783 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.464000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffdf7ed98 a2=28 a3=fffffdf7eec8 items=0 ppid=4783 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.464000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffdf7edb8 a2=28 a3=fffffdf7eee8 items=0 ppid=4783 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.464000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffdf7ed88 a2=28 a3=fffffdf7eeb8 items=0 ppid=4783 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.464000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffffdf7ee08 a2=28 a3=fffffdf7ef48 items=0 ppid=4783 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.464000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffffdf7eb40 a2=50 a3=0 items=0 ppid=4783 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.464000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit: BPF prog-id=206 op=LOAD Jul 14 21:59:03.464000 audit[4803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffffdf7eb48 a2=94 a3=5 items=0 ppid=4783 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.464000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 21:59:03.464000 audit: BPF prog-id=206 op=UNLOAD Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffffdf7ec50 a2=50 a3=0 items=0 ppid=4783 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.464000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=fffffdf7ed98 a2=4 a3=3 items=0 ppid=4783 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.464000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { confidentiality } for pid=4803 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 21:59:03.464000 audit[4803]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffffdf7ed78 a2=94 a3=6 items=0 ppid=4783 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.464000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { confidentiality } for pid=4803 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 21:59:03.464000 audit[4803]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffffdf7e548 a2=94 a3=83 items=0 ppid=4783 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.464000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { bpf } for pid=4803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: AVC avc: denied { perfmon } for pid=4803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.464000 audit[4803]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffffdf7e548 a2=94 a3=83 items=0 ppid=4783 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.464000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 21:59:03.481000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.481000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.481000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.481000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.481000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.481000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.481000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.481000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.481000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.481000 audit: BPF prog-id=207 op=LOAD Jul 14 21:59:03.481000 audit[4809]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdbdb0438 a2=98 a3=ffffdbdb0428 items=0 ppid=4783 pid=4809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.481000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 14 21:59:03.482000 audit: BPF prog-id=207 op=UNLOAD Jul 14 21:59:03.483000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.483000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.483000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.483000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.483000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.483000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.483000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.483000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.483000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.483000 audit: BPF prog-id=208 op=LOAD Jul 14 21:59:03.483000 audit[4809]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdbdb02e8 a2=74 a3=95 items=0 ppid=4783 pid=4809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.483000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 14 21:59:03.484000 audit: BPF prog-id=208 op=UNLOAD Jul 14 21:59:03.484000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.484000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.484000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.484000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.484000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.484000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.484000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.484000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.484000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.484000 audit: BPF prog-id=209 op=LOAD Jul 14 21:59:03.484000 audit[4809]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdbdb0318 a2=40 a3=ffffdbdb0348 items=0 ppid=4783 pid=4809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.484000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 14 21:59:03.485000 audit: BPF prog-id=209 op=UNLOAD Jul 14 21:59:03.552956 systemd-networkd[1047]: vxlan.calico: Link UP Jul 14 21:59:03.552962 systemd-networkd[1047]: vxlan.calico: Gained carrier Jul 14 21:59:03.578000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.578000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.578000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.578000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.578000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.578000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.578000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.578000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.578000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.578000 audit: BPF prog-id=210 op=LOAD Jul 14 21:59:03.578000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe90ffc68 a2=98 a3=ffffe90ffc58 items=0 ppid=4783 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.578000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 21:59:03.578000 audit: BPF prog-id=210 op=UNLOAD Jul 14 21:59:03.578000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.578000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.578000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.578000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.578000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.578000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.578000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.578000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.578000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.578000 audit: BPF prog-id=211 op=LOAD Jul 14 21:59:03.578000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe90ff948 a2=74 a3=95 items=0 ppid=4783 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.578000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 21:59:03.578000 audit: BPF prog-id=211 op=UNLOAD Jul 14 21:59:03.578000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.578000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.578000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.578000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.578000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.578000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.578000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.578000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.578000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.578000 audit: BPF prog-id=212 op=LOAD Jul 14 21:59:03.578000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe90ff9a8 a2=94 a3=2 items=0 ppid=4783 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.578000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 21:59:03.579000 audit: BPF prog-id=212 op=UNLOAD Jul 14 21:59:03.579000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.579000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe90ff9d8 a2=28 a3=ffffe90ffb08 items=0 ppid=4783 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.579000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 21:59:03.579000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.579000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe90ffa08 a2=28 a3=ffffe90ffb38 items=0 ppid=4783 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.579000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 21:59:03.579000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.579000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe90ff8b8 a2=28 a3=ffffe90ff9e8 items=0 ppid=4783 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.579000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 21:59:03.579000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.579000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe90ffa28 a2=28 a3=ffffe90ffb58 items=0 ppid=4783 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.579000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 21:59:03.579000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.579000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe90ffa08 a2=28 a3=ffffe90ffb38 items=0 ppid=4783 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.579000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 21:59:03.579000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.579000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe90ff9f8 a2=28 a3=ffffe90ffb28 items=0 ppid=4783 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.579000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 21:59:03.579000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.579000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe90ffa28 a2=28 a3=ffffe90ffb58 items=0 ppid=4783 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.579000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 21:59:03.579000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.579000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe90ffa08 a2=28 a3=ffffe90ffb38 items=0 ppid=4783 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.579000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 21:59:03.579000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.579000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe90ffa28 a2=28 a3=ffffe90ffb58 items=0 ppid=4783 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.579000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 21:59:03.579000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.579000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe90ff9f8 a2=28 a3=ffffe90ffb28 items=0 ppid=4783 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.579000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 21:59:03.579000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.579000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe90ffa78 a2=28 a3=ffffe90ffbb8 items=0 ppid=4783 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.579000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 21:59:03.579000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.579000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.579000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.579000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.579000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.579000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.579000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.579000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.579000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.579000 audit: BPF prog-id=213 op=LOAD Jul 14 21:59:03.579000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe90ff898 a2=40 a3=ffffe90ff8c8 items=0 ppid=4783 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.579000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 21:59:03.579000 audit: BPF prog-id=213 op=UNLOAD Jul 14 21:59:03.580000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.580000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffe90ff8c0 a2=50 a3=0 items=0 ppid=4783 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.580000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 21:59:03.580000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.580000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffe90ff8c0 a2=50 a3=0 items=0 ppid=4783 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.580000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 21:59:03.580000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.580000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.580000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.580000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.580000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.580000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.580000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.580000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.580000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.580000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.580000 audit: BPF prog-id=214 op=LOAD Jul 14 21:59:03.580000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe90ff028 a2=94 a3=2 items=0 ppid=4783 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.580000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 21:59:03.580000 audit: BPF prog-id=214 op=UNLOAD Jul 14 21:59:03.580000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.580000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.580000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.580000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.580000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.580000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.580000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.580000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.580000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.580000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.580000 audit: BPF prog-id=215 op=LOAD Jul 14 21:59:03.580000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe90ff1b8 a2=94 a3=30 items=0 ppid=4783 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.580000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 21:59:03.588000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.588000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.588000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.588000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.588000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.588000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.588000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.588000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.588000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.588000 audit: BPF prog-id=216 op=LOAD Jul 14 21:59:03.588000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd387ecb8 a2=98 a3=ffffd387eca8 items=0 ppid=4783 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.588000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 21:59:03.588000 audit: BPF prog-id=216 op=UNLOAD Jul 14 21:59:03.588000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.588000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.588000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.588000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.588000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.588000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.588000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.588000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.588000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.588000 audit: BPF prog-id=217 op=LOAD Jul 14 21:59:03.588000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd387e948 a2=74 a3=95 items=0 ppid=4783 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.588000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 21:59:03.588000 audit: BPF prog-id=217 op=UNLOAD Jul 14 21:59:03.589000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.589000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.589000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.589000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.589000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.589000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.589000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.589000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.589000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.589000 audit: BPF prog-id=218 op=LOAD Jul 14 21:59:03.589000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd387e9a8 a2=94 a3=2 items=0 ppid=4783 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.589000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 21:59:03.589000 audit: BPF prog-id=218 op=UNLOAD Jul 14 21:59:03.682000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.682000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.682000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.682000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.682000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.682000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.682000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.682000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.682000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.682000 audit: BPF prog-id=219 op=LOAD Jul 14 21:59:03.682000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd387e968 a2=40 a3=ffffd387e998 items=0 ppid=4783 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.682000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 21:59:03.682000 audit: BPF prog-id=219 op=UNLOAD Jul 14 21:59:03.682000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.682000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffd387ea80 a2=50 a3=0 items=0 ppid=4783 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.682000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd387e9d8 a2=28 a3=ffffd387eb08 items=0 ppid=4783 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.693000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd387ea08 a2=28 a3=ffffd387eb38 items=0 ppid=4783 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.693000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd387e8b8 a2=28 a3=ffffd387e9e8 items=0 ppid=4783 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.693000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd387ea28 a2=28 a3=ffffd387eb58 items=0 ppid=4783 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.693000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd387ea08 a2=28 a3=ffffd387eb38 items=0 ppid=4783 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.693000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd387e9f8 a2=28 a3=ffffd387eb28 items=0 ppid=4783 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.693000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd387ea28 a2=28 a3=ffffd387eb58 items=0 ppid=4783 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.693000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd387ea08 a2=28 a3=ffffd387eb38 items=0 ppid=4783 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.693000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd387ea28 a2=28 a3=ffffd387eb58 items=0 ppid=4783 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.693000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd387e9f8 a2=28 a3=ffffd387eb28 items=0 ppid=4783 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.693000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd387ea78 a2=28 a3=ffffd387ebb8 items=0 ppid=4783 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.693000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffd387e7b0 a2=50 a3=0 items=0 ppid=4783 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.693000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit: BPF prog-id=220 op=LOAD Jul 14 21:59:03.693000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd387e7b8 a2=94 a3=5 items=0 ppid=4783 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.693000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 21:59:03.693000 audit: BPF prog-id=220 op=UNLOAD Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffd387e8c0 a2=50 a3=0 items=0 ppid=4783 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.693000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffd387ea08 a2=4 a3=3 items=0 ppid=4783 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.693000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { confidentiality } for pid=4843 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 21:59:03.693000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd387e9e8 a2=94 a3=6 items=0 ppid=4783 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.693000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { confidentiality } for pid=4843 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 21:59:03.693000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd387e1b8 a2=94 a3=83 items=0 ppid=4783 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.693000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.693000 audit[4843]: AVC avc: denied { confidentiality } for pid=4843 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 21:59:03.693000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd387e1b8 a2=94 a3=83 items=0 ppid=4783 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.693000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 21:59:03.694000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.694000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd387fbf8 a2=10 a3=ffffd387fce8 items=0 ppid=4783 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.694000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 21:59:03.694000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.694000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd387fab8 a2=10 a3=ffffd387fba8 items=0 ppid=4783 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.694000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 21:59:03.694000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.694000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd387fa28 a2=10 a3=ffffd387fba8 items=0 ppid=4783 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.694000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 21:59:03.694000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:03.694000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd387fa28 a2=10 a3=ffffd387fba8 items=0 ppid=4783 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.694000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 21:59:03.701000 audit: BPF prog-id=215 op=UNLOAD Jul 14 21:59:03.773000 audit[4873]: NETFILTER_CFG table=mangle:107 family=2 entries=16 op=nft_register_chain pid=4873 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 21:59:03.773000 audit[4873]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffcdb6c820 a2=0 a3=ffff8eed7fa8 items=0 ppid=4783 pid=4873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.773000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 21:59:03.778000 audit[4874]: NETFILTER_CFG table=nat:108 family=2 entries=15 op=nft_register_chain pid=4874 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 21:59:03.778000 audit[4874]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffd0634040 a2=0 a3=ffff9895bfa8 items=0 ppid=4783 pid=4874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.778000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 21:59:03.793000 audit[4872]: NETFILTER_CFG table=raw:109 family=2 entries=21 op=nft_register_chain pid=4872 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 21:59:03.793000 audit[4872]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=fffffe62b390 a2=0 a3=ffff805acfa8 items=0 ppid=4783 pid=4872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.793000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 21:59:03.812000 audit[4878]: NETFILTER_CFG table=filter:110 family=2 entries=333 op=nft_register_chain pid=4878 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 21:59:03.812000 audit[4878]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=196320 a0=3 a1=ffffc1acf1d0 a2=0 a3=ffffa59cefa8 items=0 ppid=4783 pid=4878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:03.812000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 21:59:04.345301 kubelet[1982]: E0714 21:59:04.345176 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:59:04.345301 kubelet[1982]: E0714 21:59:04.345223 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:59:04.968980 systemd-networkd[1047]: vxlan.calico: Gained IPv6LL Jul 14 21:59:05.017498 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount21746371.mount: Deactivated successfully. Jul 14 21:59:05.598315 env[1213]: time="2025-07-14T21:59:05.598268303Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:59:05.600338 env[1213]: time="2025-07-14T21:59:05.600310115Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:59:05.601884 env[1213]: time="2025-07-14T21:59:05.601835405Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:59:05.607317 env[1213]: time="2025-07-14T21:59:05.607288958Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:59:05.608026 env[1213]: time="2025-07-14T21:59:05.607998482Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f\"" Jul 14 21:59:05.610093 env[1213]: time="2025-07-14T21:59:05.610058814Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 14 21:59:05.612155 env[1213]: time="2025-07-14T21:59:05.612128387Z" level=info msg="CreateContainer within sandbox \"cd51c7eaaa5db8e443e78eb21e869f827291c10eca7d91b9830ff660da623732\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 14 21:59:05.624359 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount613052310.mount: Deactivated successfully. Jul 14 21:59:05.627319 env[1213]: time="2025-07-14T21:59:05.627280999Z" level=info msg="CreateContainer within sandbox \"cd51c7eaaa5db8e443e78eb21e869f827291c10eca7d91b9830ff660da623732\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"8073ff6259c01ca73eaa91d8d6986604200615dc33ae47a5ffe72d63e1b7f181\"" Jul 14 21:59:05.627959 env[1213]: time="2025-07-14T21:59:05.627922603Z" level=info msg="StartContainer for \"8073ff6259c01ca73eaa91d8d6986604200615dc33ae47a5ffe72d63e1b7f181\"" Jul 14 21:59:05.652294 systemd[1]: run-containerd-runc-k8s.io-8073ff6259c01ca73eaa91d8d6986604200615dc33ae47a5ffe72d63e1b7f181-runc.ZTKb9L.mount: Deactivated successfully. Jul 14 21:59:05.655918 systemd[1]: Started cri-containerd-8073ff6259c01ca73eaa91d8d6986604200615dc33ae47a5ffe72d63e1b7f181.scope. Jul 14 21:59:05.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.674145 kernel: kauditd_printk_skb: 1047 callbacks suppressed Jul 14 21:59:05.674197 kernel: audit: type=1400 audit(1752530345.670:1385): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.676549 kernel: audit: type=1400 audit(1752530345.670:1386): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.680345 kernel: audit: type=1400 audit(1752530345.670:1387): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.680406 kernel: audit: type=1400 audit(1752530345.670:1388): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.685532 kernel: audit: type=1400 audit(1752530345.670:1389): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.688561 kernel: audit: type=1400 audit(1752530345.670:1390): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.693960 kernel: audit: type=1400 audit(1752530345.670:1391): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.694052 kernel: audit: type=1400 audit(1752530345.670:1392): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.697116 kernel: audit: type=1400 audit(1752530345.670:1393): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.697171 kernel: audit: type=1400 audit(1752530345.670:1394): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.670000 audit: BPF prog-id=221 op=LOAD Jul 14 21:59:05.671000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.671000 audit[4897]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4289 pid=4897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:05.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830373366663632353963303163613733656161393164386436393836 Jul 14 21:59:05.671000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.671000 audit[4897]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4289 pid=4897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:05.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830373366663632353963303163613733656161393164386436393836 Jul 14 21:59:05.671000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.671000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.671000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.671000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.671000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.671000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.671000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.671000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.671000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.671000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.671000 audit: BPF prog-id=222 op=LOAD Jul 14 21:59:05.671000 audit[4897]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4289 pid=4897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:05.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830373366663632353963303163613733656161393164386436393836 Jul 14 21:59:05.673000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.673000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.673000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.673000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.673000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.673000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.673000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.673000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.673000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.673000 audit: BPF prog-id=223 op=LOAD Jul 14 21:59:05.673000 audit[4897]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4289 pid=4897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:05.673000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830373366663632353963303163613733656161393164386436393836 Jul 14 21:59:05.675000 audit: BPF prog-id=223 op=UNLOAD Jul 14 21:59:05.675000 audit: BPF prog-id=222 op=UNLOAD Jul 14 21:59:05.675000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.675000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.675000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.675000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.675000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.675000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.675000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.675000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.675000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.675000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:05.675000 audit: BPF prog-id=224 op=LOAD Jul 14 21:59:05.675000 audit[4897]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4289 pid=4897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:05.675000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830373366663632353963303163613733656161393164386436393836 Jul 14 21:59:05.709968 env[1213]: time="2025-07-14T21:59:05.709927461Z" level=info msg="StartContainer for \"8073ff6259c01ca73eaa91d8d6986604200615dc33ae47a5ffe72d63e1b7f181\" returns successfully" Jul 14 21:59:06.364911 kubelet[1982]: I0714 21:59:06.364607 1982 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-58fd7646b9-6w85n" podStartSLOduration=25.541498157 podStartE2EDuration="30.364588637s" podCreationTimestamp="2025-07-14 21:58:36 +0000 UTC" firstStartedPulling="2025-07-14 21:59:00.78630013 +0000 UTC m=+47.722098713" lastFinishedPulling="2025-07-14 21:59:05.60939061 +0000 UTC m=+52.545189193" observedRunningTime="2025-07-14 21:59:06.364414236 +0000 UTC m=+53.300212819" watchObservedRunningTime="2025-07-14 21:59:06.364588637 +0000 UTC m=+53.300387220" Jul 14 21:59:06.378000 audit[4945]: NETFILTER_CFG table=filter:111 family=2 entries=12 op=nft_register_rule pid=4945 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:59:06.378000 audit[4945]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd6164620 a2=0 a3=1 items=0 ppid=2082 pid=4945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:06.378000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:59:06.387000 audit[4945]: NETFILTER_CFG table=nat:112 family=2 entries=22 op=nft_register_rule pid=4945 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:59:06.387000 audit[4945]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffd6164620 a2=0 a3=1 items=0 ppid=2082 pid=4945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:06.387000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:59:06.837298 kubelet[1982]: I0714 21:59:06.837058 1982 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 21:59:06.887000 audit[4953]: NETFILTER_CFG table=filter:113 family=2 entries=11 op=nft_register_rule pid=4953 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:59:06.887000 audit[4953]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffe56a7860 a2=0 a3=1 items=0 ppid=2082 pid=4953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:06.887000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:59:06.895000 audit[4953]: NETFILTER_CFG table=nat:114 family=2 entries=29 op=nft_register_chain pid=4953 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:59:06.895000 audit[4953]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffe56a7860 a2=0 a3=1 items=0 ppid=2082 pid=4953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:06.895000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:59:07.133811 env[1213]: time="2025-07-14T21:59:07.133697030Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:59:07.135945 env[1213]: time="2025-07-14T21:59:07.135911924Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:59:07.137661 env[1213]: time="2025-07-14T21:59:07.137639895Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:59:07.138991 env[1213]: time="2025-07-14T21:59:07.138956064Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 21:59:07.139438 env[1213]: time="2025-07-14T21:59:07.139416867Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c\"" Jul 14 21:59:07.142181 env[1213]: time="2025-07-14T21:59:07.142147245Z" level=info msg="CreateContainer within sandbox \"a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 14 21:59:07.160535 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1472792224.mount: Deactivated successfully. Jul 14 21:59:07.167033 env[1213]: time="2025-07-14T21:59:07.166987327Z" level=info msg="CreateContainer within sandbox \"a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"f0ec1909fa1065f66360c5df751c33862a1a481082c15b78c2bb229167963947\"" Jul 14 21:59:07.167599 env[1213]: time="2025-07-14T21:59:07.167573851Z" level=info msg="StartContainer for \"f0ec1909fa1065f66360c5df751c33862a1a481082c15b78c2bb229167963947\"" Jul 14 21:59:07.205380 systemd[1]: Started cri-containerd-f0ec1909fa1065f66360c5df751c33862a1a481082c15b78c2bb229167963947.scope. Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { perfmon } for pid=4962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit[4962]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4225 pid=4962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:07.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630656331393039666131303635663636333630633564663735316333 Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { bpf } for pid=4962 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { bpf } for pid=4962 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { bpf } for pid=4962 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { perfmon } for pid=4962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { perfmon } for pid=4962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { perfmon } for pid=4962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { perfmon } for pid=4962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { perfmon } for pid=4962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { bpf } for pid=4962 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { bpf } for pid=4962 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit: BPF prog-id=225 op=LOAD Jul 14 21:59:07.226000 audit[4962]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4225 pid=4962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:07.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630656331393039666131303635663636333630633564663735316333 Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { bpf } for pid=4962 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { bpf } for pid=4962 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { perfmon } for pid=4962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { perfmon } for pid=4962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { perfmon } for pid=4962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { perfmon } for pid=4962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { perfmon } for pid=4962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { bpf } for pid=4962 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { bpf } for pid=4962 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit: BPF prog-id=226 op=LOAD Jul 14 21:59:07.226000 audit[4962]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4225 pid=4962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:07.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630656331393039666131303635663636333630633564663735316333 Jul 14 21:59:07.226000 audit: BPF prog-id=226 op=UNLOAD Jul 14 21:59:07.226000 audit: BPF prog-id=225 op=UNLOAD Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { bpf } for pid=4962 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { bpf } for pid=4962 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { bpf } for pid=4962 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { perfmon } for pid=4962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { perfmon } for pid=4962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { perfmon } for pid=4962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { perfmon } for pid=4962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { perfmon } for pid=4962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { bpf } for pid=4962 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit[4962]: AVC avc: denied { bpf } for pid=4962 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 21:59:07.226000 audit: BPF prog-id=227 op=LOAD Jul 14 21:59:07.226000 audit[4962]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4225 pid=4962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:07.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630656331393039666131303635663636333630633564663735316333 Jul 14 21:59:07.238178 env[1213]: time="2025-07-14T21:59:07.238126550Z" level=info msg="StartContainer for \"f0ec1909fa1065f66360c5df751c33862a1a481082c15b78c2bb229167963947\" returns successfully" Jul 14 21:59:07.367304 kubelet[1982]: I0714 21:59:07.367119 1982 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-jtcvj" podStartSLOduration=24.914290211 podStartE2EDuration="31.367103791s" podCreationTimestamp="2025-07-14 21:58:36 +0000 UTC" firstStartedPulling="2025-07-14 21:59:00.687842375 +0000 UTC m=+47.623640958" lastFinishedPulling="2025-07-14 21:59:07.140655955 +0000 UTC m=+54.076454538" observedRunningTime="2025-07-14 21:59:07.365926783 +0000 UTC m=+54.301725366" watchObservedRunningTime="2025-07-14 21:59:07.367103791 +0000 UTC m=+54.302902374" Jul 14 21:59:08.213799 kubelet[1982]: I0714 21:59:08.213666 1982 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 14 21:59:08.213799 kubelet[1982]: I0714 21:59:08.213741 1982 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 14 21:59:10.534000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:59:10.534000 audit[1869]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7c a1=400f8aa5a0 a2=fc6 a3=0 items=0 ppid=1725 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 key=(null) Jul 14 21:59:10.534000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 14 21:59:10.534000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:59:10.534000 audit[1869]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7d a1=4004f39f20 a2=fc6 a3=0 items=0 ppid=1725 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 key=(null) Jul 14 21:59:10.534000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 14 21:59:10.536000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:59:10.536000 audit[1869]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7c a1=400f8aa600 a2=fc6 a3=0 items=0 ppid=1725 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 key=(null) Jul 14 21:59:10.536000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 14 21:59:10.538000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:59:10.538000 audit[1869]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7d a1=400d4a5780 a2=fc6 a3=0 items=0 ppid=1725 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 key=(null) Jul 14 21:59:10.538000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 14 21:59:10.538000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:59:10.538000 audit[1869]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7c a1=4004f39f50 a2=fc6 a3=0 items=0 ppid=1725 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 key=(null) Jul 14 21:59:10.538000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 14 21:59:10.545000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:59:10.545000 audit[1869]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7c a1=401257c2a0 a2=fc6 a3=0 items=0 ppid=1725 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 key=(null) Jul 14 21:59:10.545000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 14 21:59:10.922000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:59:10.924226 kernel: kauditd_printk_skb: 120 callbacks suppressed Jul 14 21:59:10.924280 kernel: audit: type=1400 audit(1752530350.922:1419): avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:59:10.922000 audit[1862]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000a6f4a0 a2=fc6 a3=0 items=0 ppid=1695 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 key=(null) Jul 14 21:59:10.934289 kernel: audit: type=1300 audit(1752530350.922:1419): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000a6f4a0 a2=fc6 a3=0 items=0 ppid=1695 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 key=(null) Jul 14 21:59:10.934374 kernel: audit: type=1327 audit(1752530350.922:1419): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 21:59:10.922000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 21:59:10.922000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:59:10.943580 kernel: audit: type=1400 audit(1752530350.922:1420): avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:59:10.943641 kernel: audit: type=1300 audit(1752530350.922:1420): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002a4cf00 a2=fc6 a3=0 items=0 ppid=1695 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 key=(null) Jul 14 21:59:10.922000 audit[1862]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002a4cf00 a2=fc6 a3=0 items=0 ppid=1695 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 key=(null) Jul 14 21:59:10.922000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 21:59:10.951877 kernel: audit: type=1327 audit(1752530350.922:1420): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 21:59:13.138011 env[1213]: time="2025-07-14T21:59:13.137970654Z" level=info msg="StopPodSandbox for \"64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf\"" Jul 14 21:59:13.231791 env[1213]: 2025-07-14 21:59:13.193 [WARNING][5055] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5789c98db4--qmxz9-eth0", GenerateName:"calico-apiserver-5789c98db4-", Namespace:"calico-apiserver", SelfLink:"", UID:"3c67d7b7-7d0d-4313-a8cc-1f1226c108af", ResourceVersion:"1052", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5789c98db4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"663a301a78dbba12d9110cc60974456640fc7a6f390be5164a56fbddddf37160", Pod:"calico-apiserver-5789c98db4-qmxz9", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1bd53c6aea9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:59:13.231791 env[1213]: 2025-07-14 21:59:13.193 [INFO][5055] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" Jul 14 21:59:13.231791 env[1213]: 2025-07-14 21:59:13.193 [INFO][5055] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" iface="eth0" netns="" Jul 14 21:59:13.231791 env[1213]: 2025-07-14 21:59:13.193 [INFO][5055] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" Jul 14 21:59:13.231791 env[1213]: 2025-07-14 21:59:13.193 [INFO][5055] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" Jul 14 21:59:13.231791 env[1213]: 2025-07-14 21:59:13.217 [INFO][5065] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" HandleID="k8s-pod-network.64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" Workload="localhost-k8s-calico--apiserver--5789c98db4--qmxz9-eth0" Jul 14 21:59:13.231791 env[1213]: 2025-07-14 21:59:13.217 [INFO][5065] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:59:13.231791 env[1213]: 2025-07-14 21:59:13.217 [INFO][5065] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:59:13.231791 env[1213]: 2025-07-14 21:59:13.226 [WARNING][5065] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" HandleID="k8s-pod-network.64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" Workload="localhost-k8s-calico--apiserver--5789c98db4--qmxz9-eth0" Jul 14 21:59:13.231791 env[1213]: 2025-07-14 21:59:13.226 [INFO][5065] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" HandleID="k8s-pod-network.64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" Workload="localhost-k8s-calico--apiserver--5789c98db4--qmxz9-eth0" Jul 14 21:59:13.231791 env[1213]: 2025-07-14 21:59:13.227 [INFO][5065] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:59:13.231791 env[1213]: 2025-07-14 21:59:13.229 [INFO][5055] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" Jul 14 21:59:13.232559 env[1213]: time="2025-07-14T21:59:13.231807776Z" level=info msg="TearDown network for sandbox \"64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf\" successfully" Jul 14 21:59:13.232559 env[1213]: time="2025-07-14T21:59:13.231847377Z" level=info msg="StopPodSandbox for \"64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf\" returns successfully" Jul 14 21:59:13.232559 env[1213]: time="2025-07-14T21:59:13.232415181Z" level=info msg="RemovePodSandbox for \"64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf\"" Jul 14 21:59:13.232559 env[1213]: time="2025-07-14T21:59:13.232448621Z" level=info msg="Forcibly stopping sandbox \"64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf\"" Jul 14 21:59:13.298994 env[1213]: 2025-07-14 21:59:13.265 [WARNING][5083] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5789c98db4--qmxz9-eth0", GenerateName:"calico-apiserver-5789c98db4-", Namespace:"calico-apiserver", SelfLink:"", UID:"3c67d7b7-7d0d-4313-a8cc-1f1226c108af", ResourceVersion:"1052", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5789c98db4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"663a301a78dbba12d9110cc60974456640fc7a6f390be5164a56fbddddf37160", Pod:"calico-apiserver-5789c98db4-qmxz9", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1bd53c6aea9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:59:13.298994 env[1213]: 2025-07-14 21:59:13.265 [INFO][5083] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" Jul 14 21:59:13.298994 env[1213]: 2025-07-14 21:59:13.265 [INFO][5083] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" iface="eth0" netns="" Jul 14 21:59:13.298994 env[1213]: 2025-07-14 21:59:13.265 [INFO][5083] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" Jul 14 21:59:13.298994 env[1213]: 2025-07-14 21:59:13.265 [INFO][5083] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" Jul 14 21:59:13.298994 env[1213]: 2025-07-14 21:59:13.285 [INFO][5091] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" HandleID="k8s-pod-network.64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" Workload="localhost-k8s-calico--apiserver--5789c98db4--qmxz9-eth0" Jul 14 21:59:13.298994 env[1213]: 2025-07-14 21:59:13.285 [INFO][5091] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:59:13.298994 env[1213]: 2025-07-14 21:59:13.285 [INFO][5091] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:59:13.298994 env[1213]: 2025-07-14 21:59:13.293 [WARNING][5091] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" HandleID="k8s-pod-network.64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" Workload="localhost-k8s-calico--apiserver--5789c98db4--qmxz9-eth0" Jul 14 21:59:13.298994 env[1213]: 2025-07-14 21:59:13.293 [INFO][5091] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" HandleID="k8s-pod-network.64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" Workload="localhost-k8s-calico--apiserver--5789c98db4--qmxz9-eth0" Jul 14 21:59:13.298994 env[1213]: 2025-07-14 21:59:13.295 [INFO][5091] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:59:13.298994 env[1213]: 2025-07-14 21:59:13.297 [INFO][5083] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf" Jul 14 21:59:13.299426 env[1213]: time="2025-07-14T21:59:13.299037694Z" level=info msg="TearDown network for sandbox \"64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf\" successfully" Jul 14 21:59:13.317304 env[1213]: time="2025-07-14T21:59:13.317258474Z" level=info msg="RemovePodSandbox \"64f1e369fc244eb6ea4d3091083e4ff30b3a98258ffe4525d4869cecc9600ecf\" returns successfully" Jul 14 21:59:13.317783 env[1213]: time="2025-07-14T21:59:13.317751158Z" level=info msg="StopPodSandbox for \"27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314\"" Jul 14 21:59:13.397164 env[1213]: 2025-07-14 21:59:13.355 [WARNING][5112] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--b5jln-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"2aa81a5c-ff84-4a72-ac44-ad3807eb290a", ResourceVersion:"1005", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"cbbd47c5622e61cf90c6ea88b719f4e5a67a6db023c6158c8fcb9d4535a9f22e", Pod:"coredns-7c65d6cfc9-b5jln", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3d1c3d8638c", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:59:13.397164 env[1213]: 2025-07-14 21:59:13.356 [INFO][5112] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" Jul 14 21:59:13.397164 env[1213]: 2025-07-14 21:59:13.356 [INFO][5112] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" iface="eth0" netns="" Jul 14 21:59:13.397164 env[1213]: 2025-07-14 21:59:13.356 [INFO][5112] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" Jul 14 21:59:13.397164 env[1213]: 2025-07-14 21:59:13.356 [INFO][5112] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" Jul 14 21:59:13.397164 env[1213]: 2025-07-14 21:59:13.382 [INFO][5120] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" HandleID="k8s-pod-network.27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" Workload="localhost-k8s-coredns--7c65d6cfc9--b5jln-eth0" Jul 14 21:59:13.397164 env[1213]: 2025-07-14 21:59:13.382 [INFO][5120] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:59:13.397164 env[1213]: 2025-07-14 21:59:13.382 [INFO][5120] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:59:13.397164 env[1213]: 2025-07-14 21:59:13.392 [WARNING][5120] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" HandleID="k8s-pod-network.27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" Workload="localhost-k8s-coredns--7c65d6cfc9--b5jln-eth0" Jul 14 21:59:13.397164 env[1213]: 2025-07-14 21:59:13.392 [INFO][5120] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" HandleID="k8s-pod-network.27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" Workload="localhost-k8s-coredns--7c65d6cfc9--b5jln-eth0" Jul 14 21:59:13.397164 env[1213]: 2025-07-14 21:59:13.393 [INFO][5120] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:59:13.397164 env[1213]: 2025-07-14 21:59:13.395 [INFO][5112] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" Jul 14 21:59:13.397164 env[1213]: time="2025-07-14T21:59:13.397109528Z" level=info msg="TearDown network for sandbox \"27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314\" successfully" Jul 14 21:59:13.397164 env[1213]: time="2025-07-14T21:59:13.397141969Z" level=info msg="StopPodSandbox for \"27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314\" returns successfully" Jul 14 21:59:13.399224 env[1213]: time="2025-07-14T21:59:13.399195424Z" level=info msg="RemovePodSandbox for \"27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314\"" Jul 14 21:59:13.399321 env[1213]: time="2025-07-14T21:59:13.399232425Z" level=info msg="Forcibly stopping sandbox \"27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314\"" Jul 14 21:59:13.466637 env[1213]: 2025-07-14 21:59:13.434 [WARNING][5137] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--b5jln-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"2aa81a5c-ff84-4a72-ac44-ad3807eb290a", ResourceVersion:"1005", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"cbbd47c5622e61cf90c6ea88b719f4e5a67a6db023c6158c8fcb9d4535a9f22e", Pod:"coredns-7c65d6cfc9-b5jln", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3d1c3d8638c", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:59:13.466637 env[1213]: 2025-07-14 21:59:13.435 [INFO][5137] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" Jul 14 21:59:13.466637 env[1213]: 2025-07-14 21:59:13.435 [INFO][5137] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" iface="eth0" netns="" Jul 14 21:59:13.466637 env[1213]: 2025-07-14 21:59:13.435 [INFO][5137] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" Jul 14 21:59:13.466637 env[1213]: 2025-07-14 21:59:13.435 [INFO][5137] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" Jul 14 21:59:13.466637 env[1213]: 2025-07-14 21:59:13.453 [INFO][5146] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" HandleID="k8s-pod-network.27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" Workload="localhost-k8s-coredns--7c65d6cfc9--b5jln-eth0" Jul 14 21:59:13.466637 env[1213]: 2025-07-14 21:59:13.453 [INFO][5146] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:59:13.466637 env[1213]: 2025-07-14 21:59:13.453 [INFO][5146] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:59:13.466637 env[1213]: 2025-07-14 21:59:13.461 [WARNING][5146] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" HandleID="k8s-pod-network.27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" Workload="localhost-k8s-coredns--7c65d6cfc9--b5jln-eth0" Jul 14 21:59:13.466637 env[1213]: 2025-07-14 21:59:13.461 [INFO][5146] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" HandleID="k8s-pod-network.27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" Workload="localhost-k8s-coredns--7c65d6cfc9--b5jln-eth0" Jul 14 21:59:13.466637 env[1213]: 2025-07-14 21:59:13.463 [INFO][5146] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:59:13.466637 env[1213]: 2025-07-14 21:59:13.464 [INFO][5137] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314" Jul 14 21:59:13.467230 env[1213]: time="2025-07-14T21:59:13.467186868Z" level=info msg="TearDown network for sandbox \"27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314\" successfully" Jul 14 21:59:13.470433 env[1213]: time="2025-07-14T21:59:13.470347132Z" level=info msg="RemovePodSandbox \"27807b61efab1e74bb42f742f49ede17ced16c62ba6bad1c70d00fd0b64c4314\" returns successfully" Jul 14 21:59:13.471131 env[1213]: time="2025-07-14T21:59:13.471106138Z" level=info msg="StopPodSandbox for \"c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4\"" Jul 14 21:59:13.535652 env[1213]: 2025-07-14 21:59:13.504 [WARNING][5164] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" WorkloadEndpoint="localhost-k8s-whisker--7b4995f5bb--js2nx-eth0" Jul 14 21:59:13.535652 env[1213]: 2025-07-14 21:59:13.504 [INFO][5164] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" Jul 14 21:59:13.535652 env[1213]: 2025-07-14 21:59:13.504 [INFO][5164] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" iface="eth0" netns="" Jul 14 21:59:13.535652 env[1213]: 2025-07-14 21:59:13.504 [INFO][5164] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" Jul 14 21:59:13.535652 env[1213]: 2025-07-14 21:59:13.504 [INFO][5164] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" Jul 14 21:59:13.535652 env[1213]: 2025-07-14 21:59:13.522 [INFO][5173] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" HandleID="k8s-pod-network.c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" Workload="localhost-k8s-whisker--7b4995f5bb--js2nx-eth0" Jul 14 21:59:13.535652 env[1213]: 2025-07-14 21:59:13.522 [INFO][5173] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:59:13.535652 env[1213]: 2025-07-14 21:59:13.522 [INFO][5173] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:59:13.535652 env[1213]: 2025-07-14 21:59:13.530 [WARNING][5173] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" HandleID="k8s-pod-network.c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" Workload="localhost-k8s-whisker--7b4995f5bb--js2nx-eth0" Jul 14 21:59:13.535652 env[1213]: 2025-07-14 21:59:13.530 [INFO][5173] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" HandleID="k8s-pod-network.c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" Workload="localhost-k8s-whisker--7b4995f5bb--js2nx-eth0" Jul 14 21:59:13.535652 env[1213]: 2025-07-14 21:59:13.532 [INFO][5173] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:59:13.535652 env[1213]: 2025-07-14 21:59:13.533 [INFO][5164] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" Jul 14 21:59:13.536071 env[1213]: time="2025-07-14T21:59:13.535679555Z" level=info msg="TearDown network for sandbox \"c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4\" successfully" Jul 14 21:59:13.536071 env[1213]: time="2025-07-14T21:59:13.535708635Z" level=info msg="StopPodSandbox for \"c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4\" returns successfully" Jul 14 21:59:13.536318 env[1213]: time="2025-07-14T21:59:13.536276239Z" level=info msg="RemovePodSandbox for \"c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4\"" Jul 14 21:59:13.536429 env[1213]: time="2025-07-14T21:59:13.536390480Z" level=info msg="Forcibly stopping sandbox \"c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4\"" Jul 14 21:59:13.606070 env[1213]: 2025-07-14 21:59:13.571 [WARNING][5193] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" WorkloadEndpoint="localhost-k8s-whisker--7b4995f5bb--js2nx-eth0" Jul 14 21:59:13.606070 env[1213]: 2025-07-14 21:59:13.571 [INFO][5193] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" Jul 14 21:59:13.606070 env[1213]: 2025-07-14 21:59:13.571 [INFO][5193] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" iface="eth0" netns="" Jul 14 21:59:13.606070 env[1213]: 2025-07-14 21:59:13.571 [INFO][5193] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" Jul 14 21:59:13.606070 env[1213]: 2025-07-14 21:59:13.571 [INFO][5193] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" Jul 14 21:59:13.606070 env[1213]: 2025-07-14 21:59:13.588 [INFO][5202] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" HandleID="k8s-pod-network.c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" Workload="localhost-k8s-whisker--7b4995f5bb--js2nx-eth0" Jul 14 21:59:13.606070 env[1213]: 2025-07-14 21:59:13.589 [INFO][5202] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:59:13.606070 env[1213]: 2025-07-14 21:59:13.589 [INFO][5202] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:59:13.606070 env[1213]: 2025-07-14 21:59:13.599 [WARNING][5202] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" HandleID="k8s-pod-network.c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" Workload="localhost-k8s-whisker--7b4995f5bb--js2nx-eth0" Jul 14 21:59:13.606070 env[1213]: 2025-07-14 21:59:13.599 [INFO][5202] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" HandleID="k8s-pod-network.c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" Workload="localhost-k8s-whisker--7b4995f5bb--js2nx-eth0" Jul 14 21:59:13.606070 env[1213]: 2025-07-14 21:59:13.602 [INFO][5202] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:59:13.606070 env[1213]: 2025-07-14 21:59:13.604 [INFO][5193] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4" Jul 14 21:59:13.606728 env[1213]: time="2025-07-14T21:59:13.606236378Z" level=info msg="TearDown network for sandbox \"c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4\" successfully" Jul 14 21:59:13.610493 env[1213]: time="2025-07-14T21:59:13.610429850Z" level=info msg="RemovePodSandbox \"c52186684bbfc9ceac2e03c74056e7bdba858e8f28cc051ed3696e2a8ddf60f4\" returns successfully" Jul 14 21:59:13.611215 env[1213]: time="2025-07-14T21:59:13.611150975Z" level=info msg="StopPodSandbox for \"0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191\"" Jul 14 21:59:13.676408 env[1213]: 2025-07-14 21:59:13.642 [WARNING][5219] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--6w85n-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"f1062b0e-e331-4c57-a847-8cf87bfec2f2", ResourceVersion:"1047", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"cd51c7eaaa5db8e443e78eb21e869f827291c10eca7d91b9830ff660da623732", Pod:"goldmane-58fd7646b9-6w85n", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali45772671ac6", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:59:13.676408 env[1213]: 2025-07-14 21:59:13.642 [INFO][5219] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" Jul 14 21:59:13.676408 env[1213]: 2025-07-14 21:59:13.642 [INFO][5219] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" iface="eth0" netns="" Jul 14 21:59:13.676408 env[1213]: 2025-07-14 21:59:13.642 [INFO][5219] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" Jul 14 21:59:13.676408 env[1213]: 2025-07-14 21:59:13.642 [INFO][5219] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" Jul 14 21:59:13.676408 env[1213]: 2025-07-14 21:59:13.662 [INFO][5228] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" HandleID="k8s-pod-network.0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" Workload="localhost-k8s-goldmane--58fd7646b9--6w85n-eth0" Jul 14 21:59:13.676408 env[1213]: 2025-07-14 21:59:13.662 [INFO][5228] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:59:13.676408 env[1213]: 2025-07-14 21:59:13.663 [INFO][5228] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:59:13.676408 env[1213]: 2025-07-14 21:59:13.671 [WARNING][5228] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" HandleID="k8s-pod-network.0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" Workload="localhost-k8s-goldmane--58fd7646b9--6w85n-eth0" Jul 14 21:59:13.676408 env[1213]: 2025-07-14 21:59:13.671 [INFO][5228] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" HandleID="k8s-pod-network.0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" Workload="localhost-k8s-goldmane--58fd7646b9--6w85n-eth0" Jul 14 21:59:13.676408 env[1213]: 2025-07-14 21:59:13.672 [INFO][5228] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:59:13.676408 env[1213]: 2025-07-14 21:59:13.674 [INFO][5219] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" Jul 14 21:59:13.678106 env[1213]: time="2025-07-14T21:59:13.676370917Z" level=info msg="TearDown network for sandbox \"0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191\" successfully" Jul 14 21:59:13.678181 env[1213]: time="2025-07-14T21:59:13.678110171Z" level=info msg="StopPodSandbox for \"0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191\" returns successfully" Jul 14 21:59:13.678774 env[1213]: time="2025-07-14T21:59:13.678740176Z" level=info msg="RemovePodSandbox for \"0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191\"" Jul 14 21:59:13.678969 env[1213]: time="2025-07-14T21:59:13.678921377Z" level=info msg="Forcibly stopping sandbox \"0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191\"" Jul 14 21:59:13.748251 env[1213]: 2025-07-14 21:59:13.714 [WARNING][5246] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--6w85n-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"f1062b0e-e331-4c57-a847-8cf87bfec2f2", ResourceVersion:"1047", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"cd51c7eaaa5db8e443e78eb21e869f827291c10eca7d91b9830ff660da623732", Pod:"goldmane-58fd7646b9-6w85n", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali45772671ac6", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:59:13.748251 env[1213]: 2025-07-14 21:59:13.715 [INFO][5246] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" Jul 14 21:59:13.748251 env[1213]: 2025-07-14 21:59:13.715 [INFO][5246] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" iface="eth0" netns="" Jul 14 21:59:13.748251 env[1213]: 2025-07-14 21:59:13.715 [INFO][5246] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" Jul 14 21:59:13.748251 env[1213]: 2025-07-14 21:59:13.715 [INFO][5246] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" Jul 14 21:59:13.748251 env[1213]: 2025-07-14 21:59:13.734 [INFO][5254] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" HandleID="k8s-pod-network.0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" Workload="localhost-k8s-goldmane--58fd7646b9--6w85n-eth0" Jul 14 21:59:13.748251 env[1213]: 2025-07-14 21:59:13.734 [INFO][5254] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:59:13.748251 env[1213]: 2025-07-14 21:59:13.734 [INFO][5254] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:59:13.748251 env[1213]: 2025-07-14 21:59:13.742 [WARNING][5254] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" HandleID="k8s-pod-network.0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" Workload="localhost-k8s-goldmane--58fd7646b9--6w85n-eth0" Jul 14 21:59:13.748251 env[1213]: 2025-07-14 21:59:13.742 [INFO][5254] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" HandleID="k8s-pod-network.0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" Workload="localhost-k8s-goldmane--58fd7646b9--6w85n-eth0" Jul 14 21:59:13.748251 env[1213]: 2025-07-14 21:59:13.745 [INFO][5254] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:59:13.748251 env[1213]: 2025-07-14 21:59:13.746 [INFO][5246] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191" Jul 14 21:59:13.748801 env[1213]: time="2025-07-14T21:59:13.748284431Z" level=info msg="TearDown network for sandbox \"0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191\" successfully" Jul 14 21:59:13.751270 env[1213]: time="2025-07-14T21:59:13.751238173Z" level=info msg="RemovePodSandbox \"0572f1a89b1a3f01a1912e2effbf7309ad4bc17d174488c4f8d30029be96b191\" returns successfully" Jul 14 21:59:13.751889 env[1213]: time="2025-07-14T21:59:13.751838578Z" level=info msg="StopPodSandbox for \"a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50\"" Jul 14 21:59:13.822121 env[1213]: 2025-07-14 21:59:13.785 [WARNING][5272] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--8c8858955--jvl7q-eth0", GenerateName:"calico-kube-controllers-8c8858955-", Namespace:"calico-system", SelfLink:"", UID:"d21ca187-3e16-486f-8f0c-46d4535071eb", ResourceVersion:"958", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"8c8858955", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4b6bf74947a28606443163809a94262d111150075aa86963328d7e3e7b372fd5", Pod:"calico-kube-controllers-8c8858955-jvl7q", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali45e64a5e75d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:59:13.822121 env[1213]: 2025-07-14 21:59:13.785 [INFO][5272] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" Jul 14 21:59:13.822121 env[1213]: 2025-07-14 21:59:13.785 [INFO][5272] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" iface="eth0" netns="" Jul 14 21:59:13.822121 env[1213]: 2025-07-14 21:59:13.785 [INFO][5272] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" Jul 14 21:59:13.822121 env[1213]: 2025-07-14 21:59:13.785 [INFO][5272] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" Jul 14 21:59:13.822121 env[1213]: 2025-07-14 21:59:13.806 [INFO][5282] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" HandleID="k8s-pod-network.a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" Workload="localhost-k8s-calico--kube--controllers--8c8858955--jvl7q-eth0" Jul 14 21:59:13.822121 env[1213]: 2025-07-14 21:59:13.806 [INFO][5282] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:59:13.822121 env[1213]: 2025-07-14 21:59:13.806 [INFO][5282] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:59:13.822121 env[1213]: 2025-07-14 21:59:13.816 [WARNING][5282] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" HandleID="k8s-pod-network.a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" Workload="localhost-k8s-calico--kube--controllers--8c8858955--jvl7q-eth0" Jul 14 21:59:13.822121 env[1213]: 2025-07-14 21:59:13.817 [INFO][5282] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" HandleID="k8s-pod-network.a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" Workload="localhost-k8s-calico--kube--controllers--8c8858955--jvl7q-eth0" Jul 14 21:59:13.822121 env[1213]: 2025-07-14 21:59:13.818 [INFO][5282] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:59:13.822121 env[1213]: 2025-07-14 21:59:13.820 [INFO][5272] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" Jul 14 21:59:13.822609 env[1213]: time="2025-07-14T21:59:13.822160159Z" level=info msg="TearDown network for sandbox \"a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50\" successfully" Jul 14 21:59:13.822609 env[1213]: time="2025-07-14T21:59:13.822197279Z" level=info msg="StopPodSandbox for \"a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50\" returns successfully" Jul 14 21:59:13.822884 env[1213]: time="2025-07-14T21:59:13.822834964Z" level=info msg="RemovePodSandbox for \"a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50\"" Jul 14 21:59:13.823067 env[1213]: time="2025-07-14T21:59:13.823023286Z" level=info msg="Forcibly stopping sandbox \"a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50\"" Jul 14 21:59:13.903107 env[1213]: 2025-07-14 21:59:13.857 [WARNING][5305] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--8c8858955--jvl7q-eth0", GenerateName:"calico-kube-controllers-8c8858955-", Namespace:"calico-system", SelfLink:"", UID:"d21ca187-3e16-486f-8f0c-46d4535071eb", ResourceVersion:"958", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"8c8858955", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4b6bf74947a28606443163809a94262d111150075aa86963328d7e3e7b372fd5", Pod:"calico-kube-controllers-8c8858955-jvl7q", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali45e64a5e75d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:59:13.903107 env[1213]: 2025-07-14 21:59:13.857 [INFO][5305] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" Jul 14 21:59:13.903107 env[1213]: 2025-07-14 21:59:13.858 [INFO][5305] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" iface="eth0" netns="" Jul 14 21:59:13.903107 env[1213]: 2025-07-14 21:59:13.858 [INFO][5305] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" Jul 14 21:59:13.903107 env[1213]: 2025-07-14 21:59:13.858 [INFO][5305] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" Jul 14 21:59:13.903107 env[1213]: 2025-07-14 21:59:13.888 [INFO][5313] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" HandleID="k8s-pod-network.a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" Workload="localhost-k8s-calico--kube--controllers--8c8858955--jvl7q-eth0" Jul 14 21:59:13.903107 env[1213]: 2025-07-14 21:59:13.888 [INFO][5313] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:59:13.903107 env[1213]: 2025-07-14 21:59:13.888 [INFO][5313] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:59:13.903107 env[1213]: 2025-07-14 21:59:13.897 [WARNING][5313] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" HandleID="k8s-pod-network.a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" Workload="localhost-k8s-calico--kube--controllers--8c8858955--jvl7q-eth0" Jul 14 21:59:13.903107 env[1213]: 2025-07-14 21:59:13.897 [INFO][5313] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" HandleID="k8s-pod-network.a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" Workload="localhost-k8s-calico--kube--controllers--8c8858955--jvl7q-eth0" Jul 14 21:59:13.903107 env[1213]: 2025-07-14 21:59:13.899 [INFO][5313] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:59:13.903107 env[1213]: 2025-07-14 21:59:13.901 [INFO][5305] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50" Jul 14 21:59:13.903633 env[1213]: time="2025-07-14T21:59:13.903143382Z" level=info msg="TearDown network for sandbox \"a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50\" successfully" Jul 14 21:59:13.906138 env[1213]: time="2025-07-14T21:59:13.906098605Z" level=info msg="RemovePodSandbox \"a4fc66385fcc67747547d3a402bcfbaf370d29ec7f3578def42ae0705292ea50\" returns successfully" Jul 14 21:59:13.906604 env[1213]: time="2025-07-14T21:59:13.906581409Z" level=info msg="StopPodSandbox for \"065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7\"" Jul 14 21:59:13.977136 env[1213]: 2025-07-14 21:59:13.941 [WARNING][5332] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5789c98db4--s57m5-eth0", GenerateName:"calico-apiserver-5789c98db4-", Namespace:"calico-apiserver", SelfLink:"", UID:"a3bdbffd-037e-4027-9eb7-7ff772a71559", ResourceVersion:"1017", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5789c98db4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c64dab505d847ec354ef99ad2f4a94f0c5b146063092fc9d995bf6286ab4608d", Pod:"calico-apiserver-5789c98db4-s57m5", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliaac46836db3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:59:13.977136 env[1213]: 2025-07-14 21:59:13.942 [INFO][5332] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" Jul 14 21:59:13.977136 env[1213]: 2025-07-14 21:59:13.942 [INFO][5332] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" iface="eth0" netns="" Jul 14 21:59:13.977136 env[1213]: 2025-07-14 21:59:13.942 [INFO][5332] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" Jul 14 21:59:13.977136 env[1213]: 2025-07-14 21:59:13.942 [INFO][5332] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" Jul 14 21:59:13.977136 env[1213]: 2025-07-14 21:59:13.963 [INFO][5341] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" HandleID="k8s-pod-network.065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" Workload="localhost-k8s-calico--apiserver--5789c98db4--s57m5-eth0" Jul 14 21:59:13.977136 env[1213]: 2025-07-14 21:59:13.963 [INFO][5341] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:59:13.977136 env[1213]: 2025-07-14 21:59:13.963 [INFO][5341] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:59:13.977136 env[1213]: 2025-07-14 21:59:13.971 [WARNING][5341] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" HandleID="k8s-pod-network.065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" Workload="localhost-k8s-calico--apiserver--5789c98db4--s57m5-eth0" Jul 14 21:59:13.977136 env[1213]: 2025-07-14 21:59:13.971 [INFO][5341] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" HandleID="k8s-pod-network.065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" Workload="localhost-k8s-calico--apiserver--5789c98db4--s57m5-eth0" Jul 14 21:59:13.977136 env[1213]: 2025-07-14 21:59:13.973 [INFO][5341] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:59:13.977136 env[1213]: 2025-07-14 21:59:13.975 [INFO][5332] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" Jul 14 21:59:13.977754 env[1213]: time="2025-07-14T21:59:13.977163192Z" level=info msg="TearDown network for sandbox \"065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7\" successfully" Jul 14 21:59:13.977754 env[1213]: time="2025-07-14T21:59:13.977195392Z" level=info msg="StopPodSandbox for \"065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7\" returns successfully" Jul 14 21:59:13.978031 env[1213]: time="2025-07-14T21:59:13.977995678Z" level=info msg="RemovePodSandbox for \"065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7\"" Jul 14 21:59:13.978190 env[1213]: time="2025-07-14T21:59:13.978145200Z" level=info msg="Forcibly stopping sandbox \"065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7\"" Jul 14 21:59:14.042395 env[1213]: 2025-07-14 21:59:14.009 [WARNING][5360] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5789c98db4--s57m5-eth0", GenerateName:"calico-apiserver-5789c98db4-", Namespace:"calico-apiserver", SelfLink:"", UID:"a3bdbffd-037e-4027-9eb7-7ff772a71559", ResourceVersion:"1017", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5789c98db4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c64dab505d847ec354ef99ad2f4a94f0c5b146063092fc9d995bf6286ab4608d", Pod:"calico-apiserver-5789c98db4-s57m5", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliaac46836db3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:59:14.042395 env[1213]: 2025-07-14 21:59:14.010 [INFO][5360] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" Jul 14 21:59:14.042395 env[1213]: 2025-07-14 21:59:14.010 [INFO][5360] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" iface="eth0" netns="" Jul 14 21:59:14.042395 env[1213]: 2025-07-14 21:59:14.010 [INFO][5360] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" Jul 14 21:59:14.042395 env[1213]: 2025-07-14 21:59:14.010 [INFO][5360] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" Jul 14 21:59:14.042395 env[1213]: 2025-07-14 21:59:14.027 [INFO][5369] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" HandleID="k8s-pod-network.065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" Workload="localhost-k8s-calico--apiserver--5789c98db4--s57m5-eth0" Jul 14 21:59:14.042395 env[1213]: 2025-07-14 21:59:14.027 [INFO][5369] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:59:14.042395 env[1213]: 2025-07-14 21:59:14.028 [INFO][5369] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:59:14.042395 env[1213]: 2025-07-14 21:59:14.036 [WARNING][5369] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" HandleID="k8s-pod-network.065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" Workload="localhost-k8s-calico--apiserver--5789c98db4--s57m5-eth0" Jul 14 21:59:14.042395 env[1213]: 2025-07-14 21:59:14.036 [INFO][5369] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" HandleID="k8s-pod-network.065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" Workload="localhost-k8s-calico--apiserver--5789c98db4--s57m5-eth0" Jul 14 21:59:14.042395 env[1213]: 2025-07-14 21:59:14.038 [INFO][5369] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:59:14.042395 env[1213]: 2025-07-14 21:59:14.040 [INFO][5360] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7" Jul 14 21:59:14.042945 env[1213]: time="2025-07-14T21:59:14.042889785Z" level=info msg="TearDown network for sandbox \"065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7\" successfully" Jul 14 21:59:14.045778 env[1213]: time="2025-07-14T21:59:14.045741168Z" level=info msg="RemovePodSandbox \"065eb177bf57328566a11a61862a4b1f7aac7e545c0c3f2f8e433c3fed4908d7\" returns successfully" Jul 14 21:59:14.046425 env[1213]: time="2025-07-14T21:59:14.046390613Z" level=info msg="StopPodSandbox for \"62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6\"" Jul 14 21:59:14.112995 env[1213]: 2025-07-14 21:59:14.078 [WARNING][5387] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--jtcvj-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"3c931f77-c334-4b3e-a241-dda45696bef8", ResourceVersion:"1062", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f", Pod:"csi-node-driver-jtcvj", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calia60046d79da", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:59:14.112995 env[1213]: 2025-07-14 21:59:14.079 [INFO][5387] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" Jul 14 21:59:14.112995 env[1213]: 2025-07-14 21:59:14.079 [INFO][5387] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" iface="eth0" netns="" Jul 14 21:59:14.112995 env[1213]: 2025-07-14 21:59:14.079 [INFO][5387] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" Jul 14 21:59:14.112995 env[1213]: 2025-07-14 21:59:14.079 [INFO][5387] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" Jul 14 21:59:14.112995 env[1213]: 2025-07-14 21:59:14.100 [INFO][5396] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" HandleID="k8s-pod-network.62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" Workload="localhost-k8s-csi--node--driver--jtcvj-eth0" Jul 14 21:59:14.112995 env[1213]: 2025-07-14 21:59:14.100 [INFO][5396] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:59:14.112995 env[1213]: 2025-07-14 21:59:14.100 [INFO][5396] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:59:14.112995 env[1213]: 2025-07-14 21:59:14.108 [WARNING][5396] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" HandleID="k8s-pod-network.62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" Workload="localhost-k8s-csi--node--driver--jtcvj-eth0" Jul 14 21:59:14.112995 env[1213]: 2025-07-14 21:59:14.108 [INFO][5396] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" HandleID="k8s-pod-network.62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" Workload="localhost-k8s-csi--node--driver--jtcvj-eth0" Jul 14 21:59:14.112995 env[1213]: 2025-07-14 21:59:14.109 [INFO][5396] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:59:14.112995 env[1213]: 2025-07-14 21:59:14.111 [INFO][5387] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" Jul 14 21:59:14.113426 env[1213]: time="2025-07-14T21:59:14.113023817Z" level=info msg="TearDown network for sandbox \"62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6\" successfully" Jul 14 21:59:14.113426 env[1213]: time="2025-07-14T21:59:14.113054857Z" level=info msg="StopPodSandbox for \"62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6\" returns successfully" Jul 14 21:59:14.113539 env[1213]: time="2025-07-14T21:59:14.113511341Z" level=info msg="RemovePodSandbox for \"62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6\"" Jul 14 21:59:14.113596 env[1213]: time="2025-07-14T21:59:14.113561221Z" level=info msg="Forcibly stopping sandbox \"62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6\"" Jul 14 21:59:14.180947 env[1213]: 2025-07-14 21:59:14.146 [WARNING][5413] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--jtcvj-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"3c931f77-c334-4b3e-a241-dda45696bef8", ResourceVersion:"1062", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a8e6e0ab26f76a4b341e90fd8961657a5aba74eeb8f471dac1501435c0590a9f", Pod:"csi-node-driver-jtcvj", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calia60046d79da", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:59:14.180947 env[1213]: 2025-07-14 21:59:14.146 [INFO][5413] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" Jul 14 21:59:14.180947 env[1213]: 2025-07-14 21:59:14.146 [INFO][5413] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" iface="eth0" netns="" Jul 14 21:59:14.180947 env[1213]: 2025-07-14 21:59:14.146 [INFO][5413] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" Jul 14 21:59:14.180947 env[1213]: 2025-07-14 21:59:14.146 [INFO][5413] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" Jul 14 21:59:14.180947 env[1213]: 2025-07-14 21:59:14.163 [INFO][5422] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" HandleID="k8s-pod-network.62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" Workload="localhost-k8s-csi--node--driver--jtcvj-eth0" Jul 14 21:59:14.180947 env[1213]: 2025-07-14 21:59:14.163 [INFO][5422] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:59:14.180947 env[1213]: 2025-07-14 21:59:14.163 [INFO][5422] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:59:14.180947 env[1213]: 2025-07-14 21:59:14.175 [WARNING][5422] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" HandleID="k8s-pod-network.62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" Workload="localhost-k8s-csi--node--driver--jtcvj-eth0" Jul 14 21:59:14.180947 env[1213]: 2025-07-14 21:59:14.175 [INFO][5422] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" HandleID="k8s-pod-network.62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" Workload="localhost-k8s-csi--node--driver--jtcvj-eth0" Jul 14 21:59:14.180947 env[1213]: 2025-07-14 21:59:14.177 [INFO][5422] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:59:14.180947 env[1213]: 2025-07-14 21:59:14.179 [INFO][5413] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6" Jul 14 21:59:14.181560 env[1213]: time="2025-07-14T21:59:14.180991752Z" level=info msg="TearDown network for sandbox \"62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6\" successfully" Jul 14 21:59:14.184025 env[1213]: time="2025-07-14T21:59:14.183994376Z" level=info msg="RemovePodSandbox \"62f5baea96efa67183834a312bad34d1115a49f0701cbc9ca48a32d0b4d019e6\" returns successfully" Jul 14 21:59:14.184525 env[1213]: time="2025-07-14T21:59:14.184494780Z" level=info msg="StopPodSandbox for \"e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d\"" Jul 14 21:59:14.250724 env[1213]: 2025-07-14 21:59:14.217 [WARNING][5440] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--hk8zv-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"4411d551-971a-4801-a959-d2959312b095", ResourceVersion:"1013", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7bcc79297ee90208056f530471daaeca5862d9857bd17977bb1d25e2ef03aae2", Pod:"coredns-7c65d6cfc9-hk8zv", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali8b9894c3d2d", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:59:14.250724 env[1213]: 2025-07-14 21:59:14.217 [INFO][5440] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" Jul 14 21:59:14.250724 env[1213]: 2025-07-14 21:59:14.217 [INFO][5440] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" iface="eth0" netns="" Jul 14 21:59:14.250724 env[1213]: 2025-07-14 21:59:14.217 [INFO][5440] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" Jul 14 21:59:14.250724 env[1213]: 2025-07-14 21:59:14.217 [INFO][5440] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" Jul 14 21:59:14.250724 env[1213]: 2025-07-14 21:59:14.236 [INFO][5448] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" HandleID="k8s-pod-network.e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" Workload="localhost-k8s-coredns--7c65d6cfc9--hk8zv-eth0" Jul 14 21:59:14.250724 env[1213]: 2025-07-14 21:59:14.237 [INFO][5448] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:59:14.250724 env[1213]: 2025-07-14 21:59:14.237 [INFO][5448] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:59:14.250724 env[1213]: 2025-07-14 21:59:14.245 [WARNING][5448] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" HandleID="k8s-pod-network.e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" Workload="localhost-k8s-coredns--7c65d6cfc9--hk8zv-eth0" Jul 14 21:59:14.250724 env[1213]: 2025-07-14 21:59:14.245 [INFO][5448] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" HandleID="k8s-pod-network.e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" Workload="localhost-k8s-coredns--7c65d6cfc9--hk8zv-eth0" Jul 14 21:59:14.250724 env[1213]: 2025-07-14 21:59:14.247 [INFO][5448] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:59:14.250724 env[1213]: 2025-07-14 21:59:14.249 [INFO][5440] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" Jul 14 21:59:14.250724 env[1213]: time="2025-07-14T21:59:14.250691021Z" level=info msg="TearDown network for sandbox \"e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d\" successfully" Jul 14 21:59:14.250724 env[1213]: time="2025-07-14T21:59:14.250720861Z" level=info msg="StopPodSandbox for \"e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d\" returns successfully" Jul 14 21:59:14.251759 env[1213]: time="2025-07-14T21:59:14.251727309Z" level=info msg="RemovePodSandbox for \"e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d\"" Jul 14 21:59:14.251826 env[1213]: time="2025-07-14T21:59:14.251771349Z" level=info msg="Forcibly stopping sandbox \"e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d\"" Jul 14 21:59:14.318998 env[1213]: 2025-07-14 21:59:14.286 [WARNING][5465] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--hk8zv-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"4411d551-971a-4801-a959-d2959312b095", ResourceVersion:"1013", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 21, 58, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7bcc79297ee90208056f530471daaeca5862d9857bd17977bb1d25e2ef03aae2", Pod:"coredns-7c65d6cfc9-hk8zv", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali8b9894c3d2d", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 21:59:14.318998 env[1213]: 2025-07-14 21:59:14.287 [INFO][5465] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" Jul 14 21:59:14.318998 env[1213]: 2025-07-14 21:59:14.287 [INFO][5465] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" iface="eth0" netns="" Jul 14 21:59:14.318998 env[1213]: 2025-07-14 21:59:14.287 [INFO][5465] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" Jul 14 21:59:14.318998 env[1213]: 2025-07-14 21:59:14.287 [INFO][5465] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" Jul 14 21:59:14.318998 env[1213]: 2025-07-14 21:59:14.305 [INFO][5474] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" HandleID="k8s-pod-network.e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" Workload="localhost-k8s-coredns--7c65d6cfc9--hk8zv-eth0" Jul 14 21:59:14.318998 env[1213]: 2025-07-14 21:59:14.306 [INFO][5474] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 21:59:14.318998 env[1213]: 2025-07-14 21:59:14.306 [INFO][5474] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 21:59:14.318998 env[1213]: 2025-07-14 21:59:14.314 [WARNING][5474] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" HandleID="k8s-pod-network.e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" Workload="localhost-k8s-coredns--7c65d6cfc9--hk8zv-eth0" Jul 14 21:59:14.318998 env[1213]: 2025-07-14 21:59:14.314 [INFO][5474] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" HandleID="k8s-pod-network.e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" Workload="localhost-k8s-coredns--7c65d6cfc9--hk8zv-eth0" Jul 14 21:59:14.318998 env[1213]: 2025-07-14 21:59:14.315 [INFO][5474] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 21:59:14.318998 env[1213]: 2025-07-14 21:59:14.317 [INFO][5465] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d" Jul 14 21:59:14.319477 env[1213]: time="2025-07-14T21:59:14.319014638Z" level=info msg="TearDown network for sandbox \"e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d\" successfully" Jul 14 21:59:14.322244 env[1213]: time="2025-07-14T21:59:14.322207664Z" level=info msg="RemovePodSandbox \"e25b4b9ba467f1bb65b035eba5351de7ebb5146f3396636646ea178aeb0bf71d\" returns successfully" Jul 14 21:59:16.621000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:59:16.621000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:59:16.629094 kernel: audit: type=1400 audit(1752530356.621:1421): avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:59:16.629209 kernel: audit: type=1400 audit(1752530356.621:1422): avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:59:16.621000 audit[1862]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a6ff00 a2=fc6 a3=0 items=0 ppid=1695 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 key=(null) Jul 14 21:59:16.634630 kernel: audit: type=1300 audit(1752530356.621:1422): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a6ff00 a2=fc6 a3=0 items=0 ppid=1695 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 key=(null) Jul 14 21:59:16.634736 kernel: audit: type=1327 audit(1752530356.621:1422): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 21:59:16.621000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 21:59:16.639587 kernel: audit: type=1400 audit(1752530356.622:1423): avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:59:16.622000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:59:16.642745 kernel: audit: type=1300 audit(1752530356.622:1423): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002cd2cc0 a2=fc6 a3=0 items=0 ppid=1695 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 key=(null) Jul 14 21:59:16.622000 audit[1862]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002cd2cc0 a2=fc6 a3=0 items=0 ppid=1695 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 key=(null) Jul 14 21:59:16.647202 kernel: audit: type=1327 audit(1752530356.622:1423): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 21:59:16.622000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 21:59:16.650561 kernel: audit: type=1300 audit(1752530356.621:1421): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002849a60 a2=fc6 a3=0 items=0 ppid=1695 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 key=(null) Jul 14 21:59:16.621000 audit[1862]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002849a60 a2=fc6 a3=0 items=0 ppid=1695 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 key=(null) Jul 14 21:59:16.655202 kernel: audit: type=1327 audit(1752530356.621:1421): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 21:59:16.621000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 21:59:16.658730 kernel: audit: type=1400 audit(1752530356.622:1424): avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:59:16.622000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 21:59:16.622000 audit[1862]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002849a80 a2=fc6 a3=0 items=0 ppid=1695 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 key=(null) Jul 14 21:59:16.622000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 21:59:24.704000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.76:22-10.0.0.1:45992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:59:24.709463 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 14 21:59:24.709533 kernel: audit: type=1130 audit(1752530364.704:1425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.76:22-10.0.0.1:45992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:59:24.705541 systemd[1]: Started sshd@7-10.0.0.76:22-10.0.0.1:45992.service. Jul 14 21:59:24.758000 audit[5560]: USER_ACCT pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:24.759581 sshd[5560]: Accepted publickey for core from 10.0.0.1 port 45992 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 21:59:24.762872 kernel: audit: type=1101 audit(1752530364.758:1426): pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:24.763000 audit[5560]: CRED_ACQ pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:24.769363 kernel: audit: type=1103 audit(1752530364.763:1427): pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:24.769573 kernel: audit: type=1006 audit(1752530364.763:1428): pid=5560 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Jul 14 21:59:24.769606 kernel: audit: type=1300 audit(1752530364.763:1428): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeeae2a20 a2=3 a3=1 items=0 ppid=1 pid=5560 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:24.763000 audit[5560]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeeae2a20 a2=3 a3=1 items=0 ppid=1 pid=5560 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:24.769618 sshd[5560]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 21:59:24.763000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 21:59:24.774063 kernel: audit: type=1327 audit(1752530364.763:1428): proctitle=737368643A20636F7265205B707269765D Jul 14 21:59:24.777182 systemd-logind[1206]: New session 8 of user core. Jul 14 21:59:24.778093 systemd[1]: Started session-8.scope. Jul 14 21:59:24.781000 audit[5560]: USER_START pid=5560 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:24.782000 audit[5562]: CRED_ACQ pid=5562 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:24.788158 kernel: audit: type=1105 audit(1752530364.781:1429): pid=5560 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:24.788232 kernel: audit: type=1103 audit(1752530364.782:1430): pid=5562 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:25.109882 sshd[5560]: pam_unix(sshd:session): session closed for user core Jul 14 21:59:25.110000 audit[5560]: USER_END pid=5560 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:25.112729 systemd[1]: sshd@7-10.0.0.76:22-10.0.0.1:45992.service: Deactivated successfully. Jul 14 21:59:25.113654 systemd[1]: session-8.scope: Deactivated successfully. Jul 14 21:59:25.115624 systemd-logind[1206]: Session 8 logged out. Waiting for processes to exit. Jul 14 21:59:25.110000 audit[5560]: CRED_DISP pid=5560 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:25.118816 kernel: audit: type=1106 audit(1752530365.110:1431): pid=5560 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:25.118905 kernel: audit: type=1104 audit(1752530365.110:1432): pid=5560 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:25.112000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.76:22-10.0.0.1:45992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:59:25.119405 systemd-logind[1206]: Removed session 8. Jul 14 21:59:27.150259 kubelet[1982]: E0714 21:59:27.150212 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:59:30.114293 systemd[1]: Started sshd@8-10.0.0.76:22-10.0.0.1:46006.service. Jul 14 21:59:30.113000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.76:22-10.0.0.1:46006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:59:30.115243 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 14 21:59:30.115307 kernel: audit: type=1130 audit(1752530370.113:1434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.76:22-10.0.0.1:46006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:59:30.153000 audit[5574]: USER_ACCT pid=5574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:30.154060 sshd[5574]: Accepted publickey for core from 10.0.0.1 port 46006 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 21:59:30.155702 sshd[5574]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 21:59:30.154000 audit[5574]: CRED_ACQ pid=5574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:30.163948 kernel: audit: type=1101 audit(1752530370.153:1435): pid=5574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:30.163997 kernel: audit: type=1103 audit(1752530370.154:1436): pid=5574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:30.164044 kernel: audit: type=1006 audit(1752530370.154:1437): pid=5574 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Jul 14 21:59:30.163665 systemd[1]: Started session-9.scope. Jul 14 21:59:30.165150 kernel: audit: type=1300 audit(1752530370.154:1437): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcad98350 a2=3 a3=1 items=0 ppid=1 pid=5574 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:30.154000 audit[5574]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcad98350 a2=3 a3=1 items=0 ppid=1 pid=5574 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:30.164329 systemd-logind[1206]: New session 9 of user core. Jul 14 21:59:30.154000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 21:59:30.169425 kernel: audit: type=1327 audit(1752530370.154:1437): proctitle=737368643A20636F7265205B707269765D Jul 14 21:59:30.168000 audit[5574]: USER_START pid=5574 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:30.172998 kernel: audit: type=1105 audit(1752530370.168:1438): pid=5574 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:30.172000 audit[5588]: CRED_ACQ pid=5588 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:30.176260 kernel: audit: type=1103 audit(1752530370.172:1439): pid=5588 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:30.323081 sshd[5574]: pam_unix(sshd:session): session closed for user core Jul 14 21:59:30.323000 audit[5574]: USER_END pid=5574 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:30.325973 systemd-logind[1206]: Session 9 logged out. Waiting for processes to exit. Jul 14 21:59:30.326264 systemd[1]: session-9.scope: Deactivated successfully. Jul 14 21:59:30.326996 systemd[1]: sshd@8-10.0.0.76:22-10.0.0.1:46006.service: Deactivated successfully. Jul 14 21:59:30.323000 audit[5574]: CRED_DISP pid=5574 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:30.327832 systemd-logind[1206]: Removed session 9. Jul 14 21:59:30.330557 kernel: audit: type=1106 audit(1752530370.323:1440): pid=5574 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:30.330612 kernel: audit: type=1104 audit(1752530370.323:1441): pid=5574 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:30.326000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.76:22-10.0.0.1:46006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:59:34.149273 kubelet[1982]: E0714 21:59:34.149236 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:59:35.326000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.76:22-10.0.0.1:46754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:59:35.327725 systemd[1]: Started sshd@9-10.0.0.76:22-10.0.0.1:46754.service. Jul 14 21:59:35.331230 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 14 21:59:35.331304 kernel: audit: type=1130 audit(1752530375.326:1443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.76:22-10.0.0.1:46754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:59:35.369000 audit[5612]: USER_ACCT pid=5612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:35.370967 sshd[5612]: Accepted publickey for core from 10.0.0.1 port 46754 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 21:59:35.371983 sshd[5612]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 21:59:35.370000 audit[5612]: CRED_ACQ pid=5612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:35.375926 systemd-logind[1206]: New session 10 of user core. Jul 14 21:59:35.376477 systemd[1]: Started session-10.scope. Jul 14 21:59:35.376655 kernel: audit: type=1101 audit(1752530375.369:1444): pid=5612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:35.376691 kernel: audit: type=1103 audit(1752530375.370:1445): pid=5612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:35.376707 kernel: audit: type=1006 audit(1752530375.370:1446): pid=5612 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Jul 14 21:59:35.370000 audit[5612]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeb7c1f20 a2=3 a3=1 items=0 ppid=1 pid=5612 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:35.381671 kernel: audit: type=1300 audit(1752530375.370:1446): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeb7c1f20 a2=3 a3=1 items=0 ppid=1 pid=5612 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:35.381738 kernel: audit: type=1327 audit(1752530375.370:1446): proctitle=737368643A20636F7265205B707269765D Jul 14 21:59:35.370000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 21:59:35.379000 audit[5612]: USER_START pid=5612 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:35.386071 kernel: audit: type=1105 audit(1752530375.379:1447): pid=5612 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:35.386124 kernel: audit: type=1103 audit(1752530375.380:1448): pid=5614 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:35.380000 audit[5614]: CRED_ACQ pid=5614 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:35.489701 sshd[5612]: pam_unix(sshd:session): session closed for user core Jul 14 21:59:35.489000 audit[5612]: USER_END pid=5612 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:35.492231 systemd-logind[1206]: Session 10 logged out. Waiting for processes to exit. Jul 14 21:59:35.492460 systemd[1]: sshd@9-10.0.0.76:22-10.0.0.1:46754.service: Deactivated successfully. Jul 14 21:59:35.493189 systemd[1]: session-10.scope: Deactivated successfully. Jul 14 21:59:35.493801 systemd-logind[1206]: Removed session 10. Jul 14 21:59:35.490000 audit[5612]: CRED_DISP pid=5612 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:35.497199 kernel: audit: type=1106 audit(1752530375.489:1449): pid=5612 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:35.497277 kernel: audit: type=1104 audit(1752530375.490:1450): pid=5612 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:35.491000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.76:22-10.0.0.1:46754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:59:38.155336 kubelet[1982]: I0714 21:59:38.155298 1982 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 21:59:38.238000 audit[5626]: NETFILTER_CFG table=filter:115 family=2 entries=10 op=nft_register_rule pid=5626 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:59:38.238000 audit[5626]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffd304aab0 a2=0 a3=1 items=0 ppid=2082 pid=5626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:38.238000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:59:38.249000 audit[5626]: NETFILTER_CFG table=nat:116 family=2 entries=36 op=nft_register_chain pid=5626 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:59:38.249000 audit[5626]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12004 a0=3 a1=ffffd304aab0 a2=0 a3=1 items=0 ppid=2082 pid=5626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:38.249000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:59:40.495184 systemd[1]: Started sshd@10-10.0.0.76:22-10.0.0.1:46762.service. Jul 14 21:59:40.494000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.76:22-10.0.0.1:46762 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:59:40.496408 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 14 21:59:40.496496 kernel: audit: type=1130 audit(1752530380.494:1454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.76:22-10.0.0.1:46762 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:59:40.540000 audit[5648]: USER_ACCT pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:40.542625 sshd[5648]: Accepted publickey for core from 10.0.0.1 port 46762 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 21:59:40.543185 sshd[5648]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 21:59:40.541000 audit[5648]: CRED_ACQ pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:40.547844 kernel: audit: type=1101 audit(1752530380.540:1455): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:40.547921 kernel: audit: type=1103 audit(1752530380.541:1456): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:40.546703 systemd-logind[1206]: New session 11 of user core. Jul 14 21:59:40.547571 systemd[1]: Started session-11.scope. Jul 14 21:59:40.549734 kernel: audit: type=1006 audit(1752530380.541:1457): pid=5648 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Jul 14 21:59:40.541000 audit[5648]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc7331da0 a2=3 a3=1 items=0 ppid=1 pid=5648 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:40.552966 kernel: audit: type=1300 audit(1752530380.541:1457): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc7331da0 a2=3 a3=1 items=0 ppid=1 pid=5648 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:40.553042 kernel: audit: type=1327 audit(1752530380.541:1457): proctitle=737368643A20636F7265205B707269765D Jul 14 21:59:40.541000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 21:59:40.550000 audit[5648]: USER_START pid=5648 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:40.557367 kernel: audit: type=1105 audit(1752530380.550:1458): pid=5648 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:40.551000 audit[5650]: CRED_ACQ pid=5650 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:40.560039 kernel: audit: type=1103 audit(1752530380.551:1459): pid=5650 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:40.701901 sshd[5648]: pam_unix(sshd:session): session closed for user core Jul 14 21:59:40.701000 audit[5648]: USER_END pid=5648 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:40.704724 systemd[1]: sshd@10-10.0.0.76:22-10.0.0.1:46762.service: Deactivated successfully. Jul 14 21:59:40.705654 systemd[1]: session-11.scope: Deactivated successfully. Jul 14 21:59:40.706328 systemd-logind[1206]: Session 11 logged out. Waiting for processes to exit. Jul 14 21:59:40.701000 audit[5648]: CRED_DISP pid=5648 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:40.707083 systemd-logind[1206]: Removed session 11. Jul 14 21:59:40.709063 kernel: audit: type=1106 audit(1752530380.701:1460): pid=5648 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:40.709118 kernel: audit: type=1104 audit(1752530380.701:1461): pid=5648 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:40.701000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.76:22-10.0.0.1:46762 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:59:43.150449 kubelet[1982]: E0714 21:59:43.150411 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:59:44.835912 systemd[1]: run-containerd-runc-k8s.io-8073ff6259c01ca73eaa91d8d6986604200615dc33ae47a5ffe72d63e1b7f181-runc.Z1tpWK.mount: Deactivated successfully. Jul 14 21:59:44.922000 audit[5713]: NETFILTER_CFG table=filter:117 family=2 entries=9 op=nft_register_rule pid=5713 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:59:44.922000 audit[5713]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffce25d830 a2=0 a3=1 items=0 ppid=2082 pid=5713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:44.922000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:59:44.937000 audit[5713]: NETFILTER_CFG table=nat:118 family=2 entries=31 op=nft_register_chain pid=5713 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 21:59:44.937000 audit[5713]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=ffffce25d830 a2=0 a3=1 items=0 ppid=2082 pid=5713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:44.937000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 21:59:45.706827 systemd[1]: Started sshd@11-10.0.0.76:22-10.0.0.1:53368.service. Jul 14 21:59:45.706000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.76:22-10.0.0.1:53368 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:59:45.708852 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 14 21:59:45.708926 kernel: audit: type=1130 audit(1752530385.706:1465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.76:22-10.0.0.1:53368 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:59:45.758000 audit[5715]: USER_ACCT pid=5715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:45.760412 sshd[5715]: Accepted publickey for core from 10.0.0.1 port 53368 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 21:59:45.761993 sshd[5715]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 21:59:45.760000 audit[5715]: CRED_ACQ pid=5715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:45.765505 kernel: audit: type=1101 audit(1752530385.758:1466): pid=5715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:45.765565 kernel: audit: type=1103 audit(1752530385.760:1467): pid=5715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:45.765770 kernel: audit: type=1006 audit(1752530385.760:1468): pid=5715 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Jul 14 21:59:45.767695 kernel: audit: type=1300 audit(1752530385.760:1468): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe74bff10 a2=3 a3=1 items=0 ppid=1 pid=5715 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:45.760000 audit[5715]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe74bff10 a2=3 a3=1 items=0 ppid=1 pid=5715 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:45.768036 systemd-logind[1206]: New session 12 of user core. Jul 14 21:59:45.768946 systemd[1]: Started session-12.scope. Jul 14 21:59:45.760000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 21:59:45.771405 kernel: audit: type=1327 audit(1752530385.760:1468): proctitle=737368643A20636F7265205B707269765D Jul 14 21:59:45.772000 audit[5715]: USER_START pid=5715 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:45.773000 audit[5717]: CRED_ACQ pid=5717 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:45.779386 kernel: audit: type=1105 audit(1752530385.772:1469): pid=5715 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:45.779452 kernel: audit: type=1103 audit(1752530385.773:1470): pid=5717 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:45.910774 sshd[5715]: pam_unix(sshd:session): session closed for user core Jul 14 21:59:45.910000 audit[5715]: USER_END pid=5715 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:45.910000 audit[5715]: CRED_DISP pid=5715 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:45.914620 systemd[1]: Started sshd@12-10.0.0.76:22-10.0.0.1:53374.service. Jul 14 21:59:45.915098 systemd[1]: sshd@11-10.0.0.76:22-10.0.0.1:53368.service: Deactivated successfully. Jul 14 21:59:45.915888 systemd[1]: session-12.scope: Deactivated successfully. Jul 14 21:59:45.918108 kernel: audit: type=1106 audit(1752530385.910:1471): pid=5715 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:45.918192 kernel: audit: type=1104 audit(1752530385.910:1472): pid=5715 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:45.910000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.76:22-10.0.0.1:53374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:59:45.910000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.76:22-10.0.0.1:53368 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:59:45.919603 systemd-logind[1206]: Session 12 logged out. Waiting for processes to exit. Jul 14 21:59:45.920728 systemd-logind[1206]: Removed session 12. Jul 14 21:59:45.952000 audit[5728]: USER_ACCT pid=5728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:45.953629 sshd[5728]: Accepted publickey for core from 10.0.0.1 port 53374 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 21:59:45.953000 audit[5728]: CRED_ACQ pid=5728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:45.953000 audit[5728]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffaa342b0 a2=3 a3=1 items=0 ppid=1 pid=5728 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:45.953000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 21:59:45.954765 sshd[5728]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 21:59:45.958227 systemd-logind[1206]: New session 13 of user core. Jul 14 21:59:45.959454 systemd[1]: Started session-13.scope. Jul 14 21:59:45.962000 audit[5728]: USER_START pid=5728 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:45.963000 audit[5731]: CRED_ACQ pid=5731 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:46.119499 sshd[5728]: pam_unix(sshd:session): session closed for user core Jul 14 21:59:46.123000 audit[5728]: USER_END pid=5728 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:46.123000 audit[5728]: CRED_DISP pid=5728 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:46.125000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.76:22-10.0.0.1:53382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:59:46.126151 systemd[1]: Started sshd@13-10.0.0.76:22-10.0.0.1:53382.service. Jul 14 21:59:46.128819 systemd[1]: sshd@12-10.0.0.76:22-10.0.0.1:53374.service: Deactivated successfully. Jul 14 21:59:46.128000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.76:22-10.0.0.1:53374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:59:46.129784 systemd[1]: session-13.scope: Deactivated successfully. Jul 14 21:59:46.130551 systemd-logind[1206]: Session 13 logged out. Waiting for processes to exit. Jul 14 21:59:46.136729 systemd-logind[1206]: Removed session 13. Jul 14 21:59:46.174000 audit[5739]: USER_ACCT pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:46.175276 sshd[5739]: Accepted publickey for core from 10.0.0.1 port 53382 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 21:59:46.175000 audit[5739]: CRED_ACQ pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:46.175000 audit[5739]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff8e88940 a2=3 a3=1 items=0 ppid=1 pid=5739 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:46.175000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 21:59:46.176838 sshd[5739]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 21:59:46.180968 systemd-logind[1206]: New session 14 of user core. Jul 14 21:59:46.181472 systemd[1]: Started session-14.scope. Jul 14 21:59:46.183000 audit[5739]: USER_START pid=5739 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:46.185000 audit[5742]: CRED_ACQ pid=5742 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:46.309684 sshd[5739]: pam_unix(sshd:session): session closed for user core Jul 14 21:59:46.309000 audit[5739]: USER_END pid=5739 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:46.309000 audit[5739]: CRED_DISP pid=5739 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:46.312061 systemd[1]: sshd@13-10.0.0.76:22-10.0.0.1:53382.service: Deactivated successfully. Jul 14 21:59:46.311000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.76:22-10.0.0.1:53382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:59:46.312955 systemd[1]: session-14.scope: Deactivated successfully. Jul 14 21:59:46.313499 systemd-logind[1206]: Session 14 logged out. Waiting for processes to exit. Jul 14 21:59:46.314145 systemd-logind[1206]: Removed session 14. Jul 14 21:59:51.316024 systemd[1]: Started sshd@14-10.0.0.76:22-10.0.0.1:53396.service. Jul 14 21:59:51.315000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.76:22-10.0.0.1:53396 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:59:51.317150 kernel: kauditd_printk_skb: 23 callbacks suppressed Jul 14 21:59:51.317229 kernel: audit: type=1130 audit(1752530391.315:1492): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.76:22-10.0.0.1:53396 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:59:51.355000 audit[5759]: USER_ACCT pid=5759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:51.356389 sshd[5759]: Accepted publickey for core from 10.0.0.1 port 53396 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 21:59:51.357697 sshd[5759]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 21:59:51.356000 audit[5759]: CRED_ACQ pid=5759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:51.362084 kernel: audit: type=1101 audit(1752530391.355:1493): pid=5759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:51.362172 kernel: audit: type=1103 audit(1752530391.356:1494): pid=5759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:51.362201 kernel: audit: type=1006 audit(1752530391.356:1495): pid=5759 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 14 21:59:51.362598 systemd-logind[1206]: New session 15 of user core. Jul 14 21:59:51.363417 systemd[1]: Started session-15.scope. Jul 14 21:59:51.356000 audit[5759]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc007e750 a2=3 a3=1 items=0 ppid=1 pid=5759 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:51.366823 kernel: audit: type=1300 audit(1752530391.356:1495): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc007e750 a2=3 a3=1 items=0 ppid=1 pid=5759 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:51.366913 kernel: audit: type=1327 audit(1752530391.356:1495): proctitle=737368643A20636F7265205B707269765D Jul 14 21:59:51.356000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 21:59:51.366000 audit[5759]: USER_START pid=5759 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:51.371374 kernel: audit: type=1105 audit(1752530391.366:1496): pid=5759 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:51.371436 kernel: audit: type=1103 audit(1752530391.367:1497): pid=5761 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:51.367000 audit[5761]: CRED_ACQ pid=5761 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:51.474429 sshd[5759]: pam_unix(sshd:session): session closed for user core Jul 14 21:59:51.474000 audit[5759]: USER_END pid=5759 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:51.476960 systemd[1]: session-15.scope: Deactivated successfully. Jul 14 21:59:51.477541 systemd-logind[1206]: Session 15 logged out. Waiting for processes to exit. Jul 14 21:59:51.477700 systemd[1]: sshd@14-10.0.0.76:22-10.0.0.1:53396.service: Deactivated successfully. Jul 14 21:59:51.474000 audit[5759]: CRED_DISP pid=5759 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:51.478853 systemd-logind[1206]: Removed session 15. Jul 14 21:59:51.481602 kernel: audit: type=1106 audit(1752530391.474:1498): pid=5759 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:51.481667 kernel: audit: type=1104 audit(1752530391.474:1499): pid=5759 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:51.477000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.76:22-10.0.0.1:53396 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:59:56.150471 kubelet[1982]: E0714 21:59:56.150420 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 21:59:56.476000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.76:22-10.0.0.1:39756 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:59:56.478684 systemd[1]: Started sshd@15-10.0.0.76:22-10.0.0.1:39756.service. Jul 14 21:59:56.479514 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 14 21:59:56.479686 kernel: audit: type=1130 audit(1752530396.476:1501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.76:22-10.0.0.1:39756 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 21:59:56.515000 audit[5772]: USER_ACCT pid=5772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:56.517928 sshd[5772]: Accepted publickey for core from 10.0.0.1 port 39756 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 21:59:56.519675 sshd[5772]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 21:59:56.517000 audit[5772]: CRED_ACQ pid=5772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:56.523902 kernel: audit: type=1101 audit(1752530396.515:1502): pid=5772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:56.523970 kernel: audit: type=1103 audit(1752530396.517:1503): pid=5772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:56.523993 kernel: audit: type=1006 audit(1752530396.517:1504): pid=5772 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 14 21:59:56.524163 systemd[1]: Started session-16.scope. Jul 14 21:59:56.524986 systemd-logind[1206]: New session 16 of user core. Jul 14 21:59:56.517000 audit[5772]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd6d3d640 a2=3 a3=1 items=0 ppid=1 pid=5772 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:56.529095 kernel: audit: type=1300 audit(1752530396.517:1504): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd6d3d640 a2=3 a3=1 items=0 ppid=1 pid=5772 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 21:59:56.529469 kernel: audit: type=1327 audit(1752530396.517:1504): proctitle=737368643A20636F7265205B707269765D Jul 14 21:59:56.517000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 21:59:56.530203 kernel: audit: type=1105 audit(1752530396.527:1505): pid=5772 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:56.527000 audit[5772]: USER_START pid=5772 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:56.529000 audit[5774]: CRED_ACQ pid=5774 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:56.536471 kernel: audit: type=1103 audit(1752530396.529:1506): pid=5774 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:56.648309 sshd[5772]: pam_unix(sshd:session): session closed for user core Jul 14 21:59:56.647000 audit[5772]: USER_END pid=5772 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:56.651806 systemd[1]: sshd@15-10.0.0.76:22-10.0.0.1:39756.service: Deactivated successfully. Jul 14 21:59:56.652721 systemd[1]: session-16.scope: Deactivated successfully. Jul 14 21:59:56.647000 audit[5772]: CRED_DISP pid=5772 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:56.653351 systemd-logind[1206]: Session 16 logged out. Waiting for processes to exit. Jul 14 21:59:56.654169 systemd-logind[1206]: Removed session 16. Jul 14 21:59:56.656091 kernel: audit: type=1106 audit(1752530396.647:1507): pid=5772 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:56.656146 kernel: audit: type=1104 audit(1752530396.647:1508): pid=5772 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 21:59:56.650000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.76:22-10.0.0.1:39756 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:00:01.652878 systemd[1]: Started sshd@16-10.0.0.76:22-10.0.0.1:39770.service. Jul 14 22:00:01.651000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.76:22-10.0.0.1:39770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:00:01.657465 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 14 22:00:01.657540 kernel: audit: type=1130 audit(1752530401.651:1510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.76:22-10.0.0.1:39770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:00:01.695000 audit[5809]: USER_ACCT pid=5809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:01.697209 sshd[5809]: Accepted publickey for core from 10.0.0.1 port 39770 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:00:01.698383 sshd[5809]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:00:01.696000 audit[5809]: CRED_ACQ pid=5809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:01.704030 kernel: audit: type=1101 audit(1752530401.695:1511): pid=5809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:01.704083 kernel: audit: type=1103 audit(1752530401.696:1512): pid=5809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:01.704123 kernel: audit: type=1006 audit(1752530401.696:1513): pid=5809 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Jul 14 22:00:01.702792 systemd-logind[1206]: New session 17 of user core. Jul 14 22:00:01.703232 systemd[1]: Started session-17.scope. Jul 14 22:00:01.696000 audit[5809]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc6abe090 a2=3 a3=1 items=0 ppid=1 pid=5809 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:00:01.708045 kernel: audit: type=1300 audit(1752530401.696:1513): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc6abe090 a2=3 a3=1 items=0 ppid=1 pid=5809 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:00:01.708127 kernel: audit: type=1327 audit(1752530401.696:1513): proctitle=737368643A20636F7265205B707269765D Jul 14 22:00:01.696000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:00:01.710000 audit[5809]: USER_START pid=5809 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:01.710000 audit[5811]: CRED_ACQ pid=5811 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:01.717438 kernel: audit: type=1105 audit(1752530401.710:1514): pid=5809 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:01.717495 kernel: audit: type=1103 audit(1752530401.710:1515): pid=5811 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:01.835000 audit[5809]: USER_END pid=5809 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:01.835566 sshd[5809]: pam_unix(sshd:session): session closed for user core Jul 14 22:00:01.840045 systemd-logind[1206]: Session 17 logged out. Waiting for processes to exit. Jul 14 22:00:01.835000 audit[5809]: CRED_DISP pid=5809 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:01.840208 systemd[1]: sshd@16-10.0.0.76:22-10.0.0.1:39770.service: Deactivated successfully. Jul 14 22:00:01.841531 systemd[1]: session-17.scope: Deactivated successfully. Jul 14 22:00:01.842228 systemd-logind[1206]: Removed session 17. Jul 14 22:00:01.843703 kernel: audit: type=1106 audit(1752530401.835:1516): pid=5809 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:01.843776 kernel: audit: type=1104 audit(1752530401.835:1517): pid=5809 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:01.839000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.76:22-10.0.0.1:39770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:00:03.225000 audit[4674]: AVC avc: denied { watch } for pid=4674 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_21_58_45.888561458/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c507,c761 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c507,c761 tclass=file permissive=0 Jul 14 22:00:03.225000 audit[4674]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000f7bb00 a2=fc6 a3=0 items=0 ppid=3938 pid=4674 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c507,c761 key=(null) Jul 14 22:00:03.225000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 22:00:03.227000 audit[4486]: AVC avc: denied { watch } for pid=4486 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_21_58_45.1652973752/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c569,c758 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c569,c758 tclass=file permissive=0 Jul 14 22:00:03.227000 audit[4486]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40022845c0 a2=fc6 a3=0 items=0 ppid=3820 pid=4486 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c569,c758 key=(null) Jul 14 22:00:03.227000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 22:00:06.840350 systemd[1]: Started sshd@17-10.0.0.76:22-10.0.0.1:58624.service. Jul 14 22:00:06.839000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.76:22-10.0.0.1:58624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:00:06.847157 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 14 22:00:06.847221 kernel: audit: type=1130 audit(1752530406.839:1521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.76:22-10.0.0.1:58624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:00:06.879000 audit[5822]: USER_ACCT pid=5822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:06.880261 sshd[5822]: Accepted publickey for core from 10.0.0.1 port 58624 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:00:06.881990 sshd[5822]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:00:06.879000 audit[5822]: CRED_ACQ pid=5822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:06.886082 systemd-logind[1206]: New session 18 of user core. Jul 14 22:00:06.886671 kernel: audit: type=1101 audit(1752530406.879:1522): pid=5822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:06.886718 kernel: audit: type=1103 audit(1752530406.879:1523): pid=5822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:06.886990 systemd[1]: Started session-18.scope. Jul 14 22:00:06.888697 kernel: audit: type=1006 audit(1752530406.879:1524): pid=5822 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Jul 14 22:00:06.888794 kernel: audit: type=1300 audit(1752530406.879:1524): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd80e9a90 a2=3 a3=1 items=0 ppid=1 pid=5822 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:00:06.879000 audit[5822]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd80e9a90 a2=3 a3=1 items=0 ppid=1 pid=5822 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:00:06.879000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:00:06.893670 kernel: audit: type=1327 audit(1752530406.879:1524): proctitle=737368643A20636F7265205B707269765D Jul 14 22:00:06.893739 kernel: audit: type=1105 audit(1752530406.891:1525): pid=5822 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:06.891000 audit[5822]: USER_START pid=5822 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:06.893000 audit[5824]: CRED_ACQ pid=5824 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:06.903662 kernel: audit: type=1103 audit(1752530406.893:1526): pid=5824 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:07.049714 sshd[5822]: pam_unix(sshd:session): session closed for user core Jul 14 22:00:07.049000 audit[5822]: USER_END pid=5822 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:07.052524 systemd[1]: sshd@17-10.0.0.76:22-10.0.0.1:58624.service: Deactivated successfully. Jul 14 22:00:07.053324 systemd[1]: session-18.scope: Deactivated successfully. Jul 14 22:00:07.050000 audit[5822]: CRED_DISP pid=5822 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:07.056269 systemd-logind[1206]: Session 18 logged out. Waiting for processes to exit. Jul 14 22:00:07.057045 systemd-logind[1206]: Removed session 18. Jul 14 22:00:07.057432 kernel: audit: type=1106 audit(1752530407.049:1527): pid=5822 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:07.057495 kernel: audit: type=1104 audit(1752530407.050:1528): pid=5822 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:07.051000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.76:22-10.0.0.1:58624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:00:10.535000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:00:10.535000 audit[1869]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=82 a1=4011b44ea0 a2=fc6 a3=0 items=0 ppid=1725 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 key=(null) Jul 14 22:00:10.535000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 14 22:00:10.535000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:00:10.535000 audit[1869]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=83 a1=4006a1d890 a2=fc6 a3=0 items=0 ppid=1725 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 key=(null) Jul 14 22:00:10.535000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 14 22:00:10.537000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:00:10.537000 audit[1869]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=82 a1=40131eb680 a2=fc6 a3=0 items=0 ppid=1725 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 key=(null) Jul 14 22:00:10.537000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 14 22:00:10.539000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:00:10.539000 audit[1869]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=82 a1=4007d4f890 a2=fc6 a3=0 items=0 ppid=1725 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 key=(null) Jul 14 22:00:10.539000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 14 22:00:10.539000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:00:10.539000 audit[1869]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=83 a1=400a79f0e0 a2=fc6 a3=0 items=0 ppid=1725 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 key=(null) Jul 14 22:00:10.539000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 14 22:00:10.545000 audit[1869]: AVC avc: denied { watch } for pid=1869 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:00:10.545000 audit[1869]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=82 a1=400e12c580 a2=fc6 a3=0 items=0 ppid=1725 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c287,c926 key=(null) Jul 14 22:00:10.545000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 14 22:00:10.933000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:00:10.933000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:00:10.933000 audit[1862]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001532f30 a2=fc6 a3=0 items=0 ppid=1695 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 key=(null) Jul 14 22:00:10.933000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:00:10.933000 audit[1862]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40030850e0 a2=fc6 a3=0 items=0 ppid=1695 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 key=(null) Jul 14 22:00:10.933000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:00:12.054971 systemd[1]: Started sshd@18-10.0.0.76:22-10.0.0.1:58626.service. Jul 14 22:00:12.054000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.76:22-10.0.0.1:58626 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:00:12.055981 kernel: kauditd_printk_skb: 25 callbacks suppressed Jul 14 22:00:12.056097 kernel: audit: type=1130 audit(1752530412.054:1538): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.76:22-10.0.0.1:58626 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:00:12.104000 audit[5835]: USER_ACCT pid=5835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:12.106928 sshd[5835]: Accepted publickey for core from 10.0.0.1 port 58626 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:00:12.108389 sshd[5835]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:00:12.107000 audit[5835]: CRED_ACQ pid=5835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:12.111708 kernel: audit: type=1101 audit(1752530412.104:1539): pid=5835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:12.111798 kernel: audit: type=1103 audit(1752530412.107:1540): pid=5835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:12.111823 kernel: audit: type=1006 audit(1752530412.107:1541): pid=5835 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Jul 14 22:00:12.107000 audit[5835]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0ed5480 a2=3 a3=1 items=0 ppid=1 pid=5835 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:00:12.116390 systemd-logind[1206]: New session 19 of user core. Jul 14 22:00:12.117213 kernel: audit: type=1300 audit(1752530412.107:1541): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0ed5480 a2=3 a3=1 items=0 ppid=1 pid=5835 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:00:12.117284 kernel: audit: type=1327 audit(1752530412.107:1541): proctitle=737368643A20636F7265205B707269765D Jul 14 22:00:12.107000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:00:12.116758 systemd[1]: Started session-19.scope. Jul 14 22:00:12.121000 audit[5835]: USER_START pid=5835 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:12.122000 audit[5837]: CRED_ACQ pid=5837 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:12.128397 kernel: audit: type=1105 audit(1752530412.121:1542): pid=5835 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:12.128496 kernel: audit: type=1103 audit(1752530412.122:1543): pid=5837 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:12.149563 kubelet[1982]: E0714 22:00:12.149528 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:00:12.333679 sshd[5835]: pam_unix(sshd:session): session closed for user core Jul 14 22:00:12.335000 audit[5835]: USER_END pid=5835 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:12.337527 systemd[1]: session-19.scope: Deactivated successfully. Jul 14 22:00:12.338141 systemd[1]: sshd@18-10.0.0.76:22-10.0.0.1:58626.service: Deactivated successfully. Jul 14 22:00:12.335000 audit[5835]: CRED_DISP pid=5835 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:12.342919 kernel: audit: type=1106 audit(1752530412.335:1544): pid=5835 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:12.343005 kernel: audit: type=1104 audit(1752530412.335:1545): pid=5835 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:12.340482 systemd-logind[1206]: Session 19 logged out. Waiting for processes to exit. Jul 14 22:00:12.341186 systemd-logind[1206]: Removed session 19. Jul 14 22:00:12.337000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.76:22-10.0.0.1:58626 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:00:14.715198 systemd[1]: run-containerd-runc-k8s.io-8073ff6259c01ca73eaa91d8d6986604200615dc33ae47a5ffe72d63e1b7f181-runc.Xtmj8m.mount: Deactivated successfully. Jul 14 22:00:14.842620 systemd[1]: run-containerd-runc-k8s.io-8073ff6259c01ca73eaa91d8d6986604200615dc33ae47a5ffe72d63e1b7f181-runc.AXiRC9.mount: Deactivated successfully. Jul 14 22:00:16.625000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:00:16.625000 audit[1862]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4003085480 a2=fc6 a3=0 items=0 ppid=1695 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 key=(null) Jul 14 22:00:16.625000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:00:16.625000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:00:16.625000 audit[1862]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400305b4e0 a2=fc6 a3=0 items=0 ppid=1695 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 key=(null) Jul 14 22:00:16.625000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:00:16.627000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:00:16.627000 audit[1862]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002737980 a2=fc6 a3=0 items=0 ppid=1695 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 key=(null) Jul 14 22:00:16.627000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:00:16.627000 audit[1862]: AVC avc: denied { watch } for pid=1862 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:00:16.627000 audit[1862]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40030854a0 a2=fc6 a3=0 items=0 ppid=1695 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c434,c619 key=(null) Jul 14 22:00:16.627000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:00:17.338890 systemd[1]: Started sshd@19-10.0.0.76:22-10.0.0.1:34654.service. Jul 14 22:00:17.338000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.76:22-10.0.0.1:34654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:00:17.339944 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 14 22:00:17.340009 kernel: audit: type=1130 audit(1752530417.338:1551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.76:22-10.0.0.1:34654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:00:17.389000 audit[5914]: USER_ACCT pid=5914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:17.391451 sshd[5914]: Accepted publickey for core from 10.0.0.1 port 34654 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:00:17.392720 sshd[5914]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:00:17.391000 audit[5914]: CRED_ACQ pid=5914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:17.397240 kernel: audit: type=1101 audit(1752530417.389:1552): pid=5914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:17.397307 kernel: audit: type=1103 audit(1752530417.391:1553): pid=5914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:17.397345 kernel: audit: type=1006 audit(1752530417.391:1554): pid=5914 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Jul 14 22:00:17.397462 systemd-logind[1206]: New session 20 of user core. Jul 14 22:00:17.398265 systemd[1]: Started session-20.scope. Jul 14 22:00:17.399150 kernel: audit: type=1300 audit(1752530417.391:1554): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd218c780 a2=3 a3=1 items=0 ppid=1 pid=5914 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:00:17.391000 audit[5914]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd218c780 a2=3 a3=1 items=0 ppid=1 pid=5914 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:00:17.391000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:00:17.403275 kernel: audit: type=1327 audit(1752530417.391:1554): proctitle=737368643A20636F7265205B707269765D Jul 14 22:00:17.405000 audit[5914]: USER_START pid=5914 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:17.405000 audit[5916]: CRED_ACQ pid=5916 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:17.412784 kernel: audit: type=1105 audit(1752530417.405:1555): pid=5914 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:17.412900 kernel: audit: type=1103 audit(1752530417.405:1556): pid=5916 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:17.603259 sshd[5914]: pam_unix(sshd:session): session closed for user core Jul 14 22:00:17.604000 audit[5914]: USER_END pid=5914 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:17.607937 systemd[1]: Started sshd@20-10.0.0.76:22-10.0.0.1:34658.service. Jul 14 22:00:17.604000 audit[5914]: CRED_DISP pid=5914 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:17.611412 kernel: audit: type=1106 audit(1752530417.604:1557): pid=5914 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:17.611533 kernel: audit: type=1104 audit(1752530417.604:1558): pid=5914 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:17.607000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.76:22-10.0.0.1:34658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:00:17.613347 systemd[1]: sshd@19-10.0.0.76:22-10.0.0.1:34654.service: Deactivated successfully. Jul 14 22:00:17.612000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.76:22-10.0.0.1:34654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:00:17.614241 systemd[1]: session-20.scope: Deactivated successfully. Jul 14 22:00:17.615002 systemd-logind[1206]: Session 20 logged out. Waiting for processes to exit. Jul 14 22:00:17.615865 systemd-logind[1206]: Removed session 20. Jul 14 22:00:17.656000 audit[5926]: USER_ACCT pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:17.657507 sshd[5926]: Accepted publickey for core from 10.0.0.1 port 34658 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:00:17.657000 audit[5926]: CRED_ACQ pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:17.657000 audit[5926]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe4e8fd00 a2=3 a3=1 items=0 ppid=1 pid=5926 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:00:17.657000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:00:17.658852 sshd[5926]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:00:17.663195 systemd-logind[1206]: New session 21 of user core. Jul 14 22:00:17.664046 systemd[1]: Started session-21.scope. Jul 14 22:00:17.668000 audit[5926]: USER_START pid=5926 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:17.670000 audit[5929]: CRED_ACQ pid=5929 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:27.905610 sshd[5926]: pam_unix(sshd:session): session closed for user core Jul 14 22:00:27.906000 audit[5926]: USER_END pid=5926 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:27.910678 systemd[1]: Started sshd@21-10.0.0.76:22-10.0.0.1:45620.service. Jul 14 22:00:27.911250 kernel: kauditd_printk_skb: 9 callbacks suppressed Jul 14 22:00:27.911313 kernel: audit: type=1106 audit(1752530427.906:1566): pid=5926 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:27.911340 kernel: audit: type=1104 audit(1752530427.906:1567): pid=5926 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:27.906000 audit[5926]: CRED_DISP pid=5926 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:27.911167 systemd[1]: sshd@20-10.0.0.76:22-10.0.0.1:34658.service: Deactivated successfully. Jul 14 22:00:27.912746 systemd[1]: session-21.scope: Deactivated successfully. Jul 14 22:00:27.913922 systemd-logind[1206]: Session 21 logged out. Waiting for processes to exit. Jul 14 22:00:27.909000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.76:22-10.0.0.1:45620 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:00:27.914960 systemd-logind[1206]: Removed session 21. Jul 14 22:00:27.917894 kernel: audit: type=1130 audit(1752530427.909:1568): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.76:22-10.0.0.1:45620 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:00:27.910000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.76:22-10.0.0.1:34658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:00:27.921085 kernel: audit: type=1131 audit(1752530427.910:1569): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.76:22-10.0.0.1:34658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:00:27.956000 audit[5948]: USER_ACCT pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:27.957581 sshd[5948]: Accepted publickey for core from 10.0.0.1 port 45620 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:00:27.958611 sshd[5948]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:00:27.956000 audit[5948]: CRED_ACQ pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:27.963586 kernel: audit: type=1101 audit(1752530427.956:1570): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:27.963648 kernel: audit: type=1103 audit(1752530427.956:1571): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:27.965535 kernel: audit: type=1006 audit(1752530427.956:1572): pid=5948 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Jul 14 22:00:27.956000 audit[5948]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe5df28d0 a2=3 a3=1 items=0 ppid=1 pid=5948 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:00:27.968938 kernel: audit: type=1300 audit(1752530427.956:1572): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe5df28d0 a2=3 a3=1 items=0 ppid=1 pid=5948 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:00:27.956000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:00:27.970105 kernel: audit: type=1327 audit(1752530427.956:1572): proctitle=737368643A20636F7265205B707269765D Jul 14 22:00:27.972654 systemd-logind[1206]: New session 22 of user core. Jul 14 22:00:27.972898 systemd[1]: Started session-22.scope. Jul 14 22:00:27.975000 audit[5948]: USER_START pid=5948 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:27.979000 audit[5951]: CRED_ACQ pid=5951 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:27.980894 kernel: audit: type=1105 audit(1752530427.975:1573): pid=5948 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:28.150135 kubelet[1982]: E0714 22:00:28.150093 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:00:28.150468 kubelet[1982]: E0714 22:00:28.150146 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:00:28.150703 kubelet[1982]: E0714 22:00:28.150681 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:00:30.164136 systemd[1]: run-containerd-runc-k8s.io-bcfa4edebbfaedf7d4f72d10dd7a9b4c2e380727a0722a7b9575023a5d8720e3-runc.flLldu.mount: Deactivated successfully. Jul 14 22:00:40.001013 kernel: hrtimer: interrupt took 4106253 ns Jul 14 22:00:45.149766 kubelet[1982]: E0714 22:00:45.149685 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:00:49.711000 audit[6067]: NETFILTER_CFG table=filter:119 family=2 entries=20 op=nft_register_rule pid=6067 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:00:49.714819 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 14 22:00:49.714959 kernel: audit: type=1325 audit(1752530449.711:1575): table=filter:119 family=2 entries=20 op=nft_register_rule pid=6067 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:00:49.714998 kernel: audit: type=1300 audit(1752530449.711:1575): arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=fffffc3d4a80 a2=0 a3=1 items=0 ppid=2082 pid=6067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:00:49.711000 audit[6067]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=fffffc3d4a80 a2=0 a3=1 items=0 ppid=2082 pid=6067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:00:49.711000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:00:49.721781 kernel: audit: type=1327 audit(1752530449.711:1575): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:00:49.722000 audit[6067]: NETFILTER_CFG table=nat:120 family=2 entries=26 op=nft_register_rule pid=6067 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:00:49.722000 audit[6067]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=fffffc3d4a80 a2=0 a3=1 items=0 ppid=2082 pid=6067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:00:49.732789 kernel: audit: type=1325 audit(1752530449.722:1576): table=nat:120 family=2 entries=26 op=nft_register_rule pid=6067 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:00:49.732895 kernel: audit: type=1300 audit(1752530449.722:1576): arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=fffffc3d4a80 a2=0 a3=1 items=0 ppid=2082 pid=6067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:00:49.722000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:00:49.735606 kernel: audit: type=1327 audit(1752530449.722:1576): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:00:49.736471 sshd[5948]: pam_unix(sshd:session): session closed for user core Jul 14 22:00:49.738000 audit[5948]: USER_END pid=5948 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:49.743373 systemd[1]: Started sshd@22-10.0.0.76:22-10.0.0.1:49654.service. Jul 14 22:00:49.738000 audit[5948]: CRED_DISP pid=5948 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:49.749753 kernel: audit: type=1106 audit(1752530449.738:1577): pid=5948 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:49.749894 kernel: audit: type=1104 audit(1752530449.738:1578): pid=5948 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:49.748333 systemd[1]: sshd@21-10.0.0.76:22-10.0.0.1:45620.service: Deactivated successfully. Jul 14 22:00:49.749092 systemd[1]: session-22.scope: Deactivated successfully. Jul 14 22:00:49.749498 systemd-logind[1206]: Session 22 logged out. Waiting for processes to exit. Jul 14 22:00:49.742000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.76:22-10.0.0.1:49654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:00:49.754080 kernel: audit: type=1130 audit(1752530449.742:1579): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.76:22-10.0.0.1:49654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:00:49.753814 systemd-logind[1206]: Removed session 22. Jul 14 22:00:49.747000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.76:22-10.0.0.1:45620 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:00:49.757536 kernel: audit: type=1131 audit(1752530449.747:1580): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.76:22-10.0.0.1:45620 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:00:49.751000 audit[6071]: NETFILTER_CFG table=filter:121 family=2 entries=32 op=nft_register_rule pid=6071 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:00:49.751000 audit[6071]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffd2c17330 a2=0 a3=1 items=0 ppid=2082 pid=6071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:00:49.751000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:00:49.759000 audit[6071]: NETFILTER_CFG table=nat:122 family=2 entries=26 op=nft_register_rule pid=6071 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:00:49.759000 audit[6071]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffd2c17330 a2=0 a3=1 items=0 ppid=2082 pid=6071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:00:49.759000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:00:49.790000 audit[6070]: USER_ACCT pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:49.791519 sshd[6070]: Accepted publickey for core from 10.0.0.1 port 49654 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:00:49.791000 audit[6070]: CRED_ACQ pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:49.791000 audit[6070]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc218bd50 a2=3 a3=1 items=0 ppid=1 pid=6070 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:00:49.791000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:00:49.792902 sshd[6070]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:00:49.796157 systemd-logind[1206]: New session 23 of user core. Jul 14 22:00:49.797025 systemd[1]: Started session-23.scope. Jul 14 22:00:49.800000 audit[6070]: USER_START pid=6070 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:49.801000 audit[6075]: CRED_ACQ pid=6075 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:50.146536 sshd[6070]: pam_unix(sshd:session): session closed for user core Jul 14 22:00:50.147000 audit[6070]: USER_END pid=6070 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:50.147000 audit[6070]: CRED_DISP pid=6070 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:50.150973 systemd[1]: Started sshd@23-10.0.0.76:22-10.0.0.1:49656.service. Jul 14 22:00:50.150000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.76:22-10.0.0.1:49656 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:00:50.158416 systemd[1]: sshd@22-10.0.0.76:22-10.0.0.1:49654.service: Deactivated successfully. Jul 14 22:00:50.157000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.76:22-10.0.0.1:49654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:00:50.159264 systemd[1]: session-23.scope: Deactivated successfully. Jul 14 22:00:50.159952 systemd-logind[1206]: Session 23 logged out. Waiting for processes to exit. Jul 14 22:00:50.160806 systemd-logind[1206]: Removed session 23. Jul 14 22:00:50.193000 audit[6084]: USER_ACCT pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:50.194431 sshd[6084]: Accepted publickey for core from 10.0.0.1 port 49656 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:00:50.194000 audit[6084]: CRED_ACQ pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:50.194000 audit[6084]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffd6257f0 a2=3 a3=1 items=0 ppid=1 pid=6084 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:00:50.194000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:00:50.195921 sshd[6084]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:00:50.199392 systemd-logind[1206]: New session 24 of user core. Jul 14 22:00:50.200313 systemd[1]: Started session-24.scope. Jul 14 22:00:50.204000 audit[6084]: USER_START pid=6084 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:50.206000 audit[6087]: CRED_ACQ pid=6087 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:50.326212 sshd[6084]: pam_unix(sshd:session): session closed for user core Jul 14 22:00:50.326000 audit[6084]: USER_END pid=6084 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:50.326000 audit[6084]: CRED_DISP pid=6084 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:50.328808 systemd[1]: sshd@23-10.0.0.76:22-10.0.0.1:49656.service: Deactivated successfully. Jul 14 22:00:50.328000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.76:22-10.0.0.1:49656 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:00:50.329599 systemd[1]: session-24.scope: Deactivated successfully. Jul 14 22:00:50.330133 systemd-logind[1206]: Session 24 logged out. Waiting for processes to exit. Jul 14 22:00:50.330906 systemd-logind[1206]: Removed session 24. Jul 14 22:00:54.625000 audit[6100]: NETFILTER_CFG table=filter:123 family=2 entries=20 op=nft_register_rule pid=6100 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:00:54.625000 audit[6100]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffc0ca8090 a2=0 a3=1 items=0 ppid=2082 pid=6100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:00:54.625000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:00:54.635000 audit[6100]: NETFILTER_CFG table=nat:124 family=2 entries=110 op=nft_register_chain pid=6100 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:00:54.635000 audit[6100]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=ffffc0ca8090 a2=0 a3=1 items=0 ppid=2082 pid=6100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:00:54.635000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:00:55.331854 systemd[1]: Started sshd@24-10.0.0.76:22-10.0.0.1:43862.service. Jul 14 22:00:55.331000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.76:22-10.0.0.1:43862 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:00:55.332997 kernel: kauditd_printk_skb: 33 callbacks suppressed Jul 14 22:00:55.333070 kernel: audit: type=1130 audit(1752530455.331:1602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.76:22-10.0.0.1:43862 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:00:55.370000 audit[6103]: USER_ACCT pid=6103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:55.371576 sshd[6103]: Accepted publickey for core from 10.0.0.1 port 43862 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:00:55.372791 sshd[6103]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:00:55.371000 audit[6103]: CRED_ACQ pid=6103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:55.374944 kernel: audit: type=1101 audit(1752530455.370:1603): pid=6103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:55.374987 kernel: audit: type=1103 audit(1752530455.371:1604): pid=6103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:55.380541 kernel: audit: type=1006 audit(1752530455.371:1605): pid=6103 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Jul 14 22:00:55.380607 kernel: audit: type=1300 audit(1752530455.371:1605): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdd47dcb0 a2=3 a3=1 items=0 ppid=1 pid=6103 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:00:55.371000 audit[6103]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdd47dcb0 a2=3 a3=1 items=0 ppid=1 pid=6103 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:00:55.371000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:00:55.386749 kernel: audit: type=1327 audit(1752530455.371:1605): proctitle=737368643A20636F7265205B707269765D Jul 14 22:00:55.388570 systemd-logind[1206]: New session 25 of user core. Jul 14 22:00:55.389381 systemd[1]: Started session-25.scope. Jul 14 22:00:55.392000 audit[6103]: USER_START pid=6103 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:55.394000 audit[6105]: CRED_ACQ pid=6105 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:55.399873 kernel: audit: type=1105 audit(1752530455.392:1606): pid=6103 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:55.399948 kernel: audit: type=1103 audit(1752530455.394:1607): pid=6105 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:55.501494 sshd[6103]: pam_unix(sshd:session): session closed for user core Jul 14 22:00:55.501000 audit[6103]: USER_END pid=6103 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:55.503979 systemd[1]: sshd@24-10.0.0.76:22-10.0.0.1:43862.service: Deactivated successfully. Jul 14 22:00:55.504744 systemd[1]: session-25.scope: Deactivated successfully. Jul 14 22:00:55.501000 audit[6103]: CRED_DISP pid=6103 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:55.509006 kernel: audit: type=1106 audit(1752530455.501:1608): pid=6103 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:55.509066 kernel: audit: type=1104 audit(1752530455.501:1609): pid=6103 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:00:55.509074 systemd-logind[1206]: Session 25 logged out. Waiting for processes to exit. Jul 14 22:00:55.501000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.76:22-10.0.0.1:43862 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:00:55.509817 systemd-logind[1206]: Removed session 25. Jul 14 22:00:56.149845 kubelet[1982]: E0714 22:00:56.149805 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:01:00.505000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.76:22-10.0.0.1:43870 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:01:00.506390 systemd[1]: Started sshd@25-10.0.0.76:22-10.0.0.1:43870.service. Jul 14 22:01:00.507459 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 14 22:01:00.507526 kernel: audit: type=1130 audit(1752530460.505:1611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.76:22-10.0.0.1:43870 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:01:00.544000 audit[6140]: USER_ACCT pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:01:00.545552 sshd[6140]: Accepted publickey for core from 10.0.0.1 port 43870 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:01:00.546870 sshd[6140]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:01:00.545000 audit[6140]: CRED_ACQ pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:01:00.550671 systemd-logind[1206]: New session 26 of user core. Jul 14 22:01:00.551373 systemd[1]: Started session-26.scope. Jul 14 22:01:00.552734 kernel: audit: type=1101 audit(1752530460.544:1612): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:01:00.552808 kernel: audit: type=1103 audit(1752530460.545:1613): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:01:00.552834 kernel: audit: type=1006 audit(1752530460.545:1614): pid=6140 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Jul 14 22:01:00.554603 kernel: audit: type=1300 audit(1752530460.545:1614): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff89bb600 a2=3 a3=1 items=0 ppid=1 pid=6140 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:01:00.545000 audit[6140]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff89bb600 a2=3 a3=1 items=0 ppid=1 pid=6140 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:01:00.545000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:01:00.560585 kernel: audit: type=1327 audit(1752530460.545:1614): proctitle=737368643A20636F7265205B707269765D Jul 14 22:01:00.560652 kernel: audit: type=1105 audit(1752530460.556:1615): pid=6140 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:01:00.556000 audit[6140]: USER_START pid=6140 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:01:00.558000 audit[6142]: CRED_ACQ pid=6142 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:01:00.567285 kernel: audit: type=1103 audit(1752530460.558:1616): pid=6142 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:01:00.669723 sshd[6140]: pam_unix(sshd:session): session closed for user core Jul 14 22:01:00.669000 audit[6140]: USER_END pid=6140 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:01:00.672792 systemd-logind[1206]: Session 26 logged out. Waiting for processes to exit. Jul 14 22:01:00.673036 systemd[1]: sshd@25-10.0.0.76:22-10.0.0.1:43870.service: Deactivated successfully. Jul 14 22:01:00.673783 systemd[1]: session-26.scope: Deactivated successfully. Jul 14 22:01:00.674574 systemd-logind[1206]: Removed session 26. Jul 14 22:01:00.670000 audit[6140]: CRED_DISP pid=6140 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:01:00.683361 kernel: audit: type=1106 audit(1752530460.669:1617): pid=6140 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:01:00.683422 kernel: audit: type=1104 audit(1752530460.670:1618): pid=6140 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:01:00.670000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.76:22-10.0.0.1:43870 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:01:03.227000 audit[4674]: AVC avc: denied { watch } for pid=4674 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_21_58_45.888561458/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c507,c761 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c507,c761 tclass=file permissive=0 Jul 14 22:01:03.227000 audit[4674]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4001ab8200 a2=fc6 a3=0 items=0 ppid=3938 pid=4674 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c507,c761 key=(null) Jul 14 22:01:03.227000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 22:01:03.228000 audit[4486]: AVC avc: denied { watch } for pid=4486 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_21_58_45.1652973752/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c569,c758 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c569,c758 tclass=file permissive=0 Jul 14 22:01:03.228000 audit[4486]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4002284d20 a2=fc6 a3=0 items=0 ppid=3820 pid=4486 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c569,c758 key=(null) Jul 14 22:01:03.228000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 22:01:05.149679 kubelet[1982]: E0714 22:01:05.149637 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:01:05.674767 systemd[1]: Started sshd@26-10.0.0.76:22-10.0.0.1:56998.service. Jul 14 22:01:05.674000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.76:22-10.0.0.1:56998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:01:05.676089 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 14 22:01:05.676165 kernel: audit: type=1130 audit(1752530465.674:1622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.76:22-10.0.0.1:56998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:01:05.728768 sshd[6156]: Accepted publickey for core from 10.0.0.1 port 56998 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:01:05.727000 audit[6156]: USER_ACCT pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:01:05.730179 sshd[6156]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:01:05.728000 audit[6156]: CRED_ACQ pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:01:05.736611 kernel: audit: type=1101 audit(1752530465.727:1623): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:01:05.736682 kernel: audit: type=1103 audit(1752530465.728:1624): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:01:05.738758 kernel: audit: type=1006 audit(1752530465.729:1625): pid=6156 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Jul 14 22:01:05.729000 audit[6156]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffef9145d0 a2=3 a3=1 items=0 ppid=1 pid=6156 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:01:05.742589 kernel: audit: type=1300 audit(1752530465.729:1625): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffef9145d0 a2=3 a3=1 items=0 ppid=1 pid=6156 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:01:05.744493 kernel: audit: type=1327 audit(1752530465.729:1625): proctitle=737368643A20636F7265205B707269765D Jul 14 22:01:05.729000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:01:05.749084 systemd-logind[1206]: New session 27 of user core. Jul 14 22:01:05.749482 systemd[1]: Started session-27.scope. Jul 14 22:01:05.754000 audit[6156]: USER_START pid=6156 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:01:05.759904 kernel: audit: type=1105 audit(1752530465.754:1626): pid=6156 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:01:05.759000 audit[6158]: CRED_ACQ pid=6158 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:01:05.763899 kernel: audit: type=1103 audit(1752530465.759:1627): pid=6158 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:01:05.882601 sshd[6156]: pam_unix(sshd:session): session closed for user core Jul 14 22:01:05.882000 audit[6156]: USER_END pid=6156 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:01:05.885557 systemd[1]: sshd@26-10.0.0.76:22-10.0.0.1:56998.service: Deactivated successfully. Jul 14 22:01:05.886413 systemd[1]: session-27.scope: Deactivated successfully. Jul 14 22:01:05.882000 audit[6156]: CRED_DISP pid=6156 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:01:05.887202 systemd-logind[1206]: Session 27 logged out. Waiting for processes to exit. Jul 14 22:01:05.888944 systemd-logind[1206]: Removed session 27. Jul 14 22:01:05.890667 kernel: audit: type=1106 audit(1752530465.882:1628): pid=6156 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:01:05.890752 kernel: audit: type=1104 audit(1752530465.882:1629): pid=6156 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:01:05.884000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.76:22-10.0.0.1:56998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'