Jul 14 22:11:53.728259 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Jul 14 22:11:53.728279 kernel: Linux version 5.15.187-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Jul 14 20:49:56 -00 2025 Jul 14 22:11:53.728287 kernel: efi: EFI v2.70 by EDK II Jul 14 22:11:53.728293 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Jul 14 22:11:53.728298 kernel: random: crng init done Jul 14 22:11:53.728303 kernel: ACPI: Early table checksum verification disabled Jul 14 22:11:53.728310 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Jul 14 22:11:53.728317 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Jul 14 22:11:53.728322 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 22:11:53.728328 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 22:11:53.728333 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 22:11:53.728339 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 22:11:53.728344 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 22:11:53.728350 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 22:11:53.728358 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 22:11:53.728364 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 22:11:53.728370 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 22:11:53.728376 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Jul 14 22:11:53.728381 kernel: NUMA: Failed to initialise from firmware Jul 14 22:11:53.728387 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Jul 14 22:11:53.728393 kernel: NUMA: NODE_DATA [mem 0xdcb09900-0xdcb0efff] Jul 14 22:11:53.728399 kernel: Zone ranges: Jul 14 22:11:53.728405 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Jul 14 22:11:53.728412 kernel: DMA32 empty Jul 14 22:11:53.728424 kernel: Normal empty Jul 14 22:11:53.728430 kernel: Movable zone start for each node Jul 14 22:11:53.728436 kernel: Early memory node ranges Jul 14 22:11:53.728441 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Jul 14 22:11:53.728447 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Jul 14 22:11:53.728453 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Jul 14 22:11:53.728473 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Jul 14 22:11:53.728479 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Jul 14 22:11:53.728485 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Jul 14 22:11:53.728491 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Jul 14 22:11:53.728497 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Jul 14 22:11:53.728504 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Jul 14 22:11:53.728509 kernel: psci: probing for conduit method from ACPI. Jul 14 22:11:53.728515 kernel: psci: PSCIv1.1 detected in firmware. Jul 14 22:11:53.728521 kernel: psci: Using standard PSCI v0.2 function IDs Jul 14 22:11:53.728527 kernel: psci: Trusted OS migration not required Jul 14 22:11:53.728535 kernel: psci: SMC Calling Convention v1.1 Jul 14 22:11:53.728541 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Jul 14 22:11:53.728548 kernel: ACPI: SRAT not present Jul 14 22:11:53.728555 kernel: percpu: Embedded 30 pages/cpu s82968 r8192 d31720 u122880 Jul 14 22:11:53.728561 kernel: pcpu-alloc: s82968 r8192 d31720 u122880 alloc=30*4096 Jul 14 22:11:53.728567 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Jul 14 22:11:53.728573 kernel: Detected PIPT I-cache on CPU0 Jul 14 22:11:53.728579 kernel: CPU features: detected: GIC system register CPU interface Jul 14 22:11:53.728585 kernel: CPU features: detected: Hardware dirty bit management Jul 14 22:11:53.728591 kernel: CPU features: detected: Spectre-v4 Jul 14 22:11:53.728597 kernel: CPU features: detected: Spectre-BHB Jul 14 22:11:53.728604 kernel: CPU features: kernel page table isolation forced ON by KASLR Jul 14 22:11:53.728610 kernel: CPU features: detected: Kernel page table isolation (KPTI) Jul 14 22:11:53.728617 kernel: CPU features: detected: ARM erratum 1418040 Jul 14 22:11:53.728623 kernel: CPU features: detected: SSBS not fully self-synchronizing Jul 14 22:11:53.728629 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Jul 14 22:11:53.728635 kernel: Policy zone: DMA Jul 14 22:11:53.728642 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=0fbac260ee8dcd4db6590eed44229ca41387b27ea0fa758fd2be410620d68236 Jul 14 22:11:53.728648 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 14 22:11:53.728655 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 14 22:11:53.728661 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 14 22:11:53.728667 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 14 22:11:53.728675 kernel: Memory: 2457332K/2572288K available (9792K kernel code, 2094K rwdata, 7588K rodata, 36416K init, 777K bss, 114956K reserved, 0K cma-reserved) Jul 14 22:11:53.728681 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Jul 14 22:11:53.728688 kernel: trace event string verifier disabled Jul 14 22:11:53.728694 kernel: rcu: Preemptible hierarchical RCU implementation. Jul 14 22:11:53.728700 kernel: rcu: RCU event tracing is enabled. Jul 14 22:11:53.728707 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Jul 14 22:11:53.728713 kernel: Trampoline variant of Tasks RCU enabled. Jul 14 22:11:53.728719 kernel: Tracing variant of Tasks RCU enabled. Jul 14 22:11:53.728735 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 14 22:11:53.728741 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Jul 14 22:11:53.728748 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Jul 14 22:11:53.728755 kernel: GICv3: 256 SPIs implemented Jul 14 22:11:53.728761 kernel: GICv3: 0 Extended SPIs implemented Jul 14 22:11:53.728767 kernel: GICv3: Distributor has no Range Selector support Jul 14 22:11:53.728773 kernel: Root IRQ handler: gic_handle_irq Jul 14 22:11:53.728779 kernel: GICv3: 16 PPIs implemented Jul 14 22:11:53.728786 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Jul 14 22:11:53.728792 kernel: ACPI: SRAT not present Jul 14 22:11:53.728798 kernel: ITS [mem 0x08080000-0x0809ffff] Jul 14 22:11:53.728804 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Jul 14 22:11:53.728811 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Jul 14 22:11:53.728817 kernel: GICv3: using LPI property table @0x00000000400d0000 Jul 14 22:11:53.728823 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Jul 14 22:11:53.728831 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 14 22:11:53.728837 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Jul 14 22:11:53.728844 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Jul 14 22:11:53.728853 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Jul 14 22:11:53.728860 kernel: arm-pv: using stolen time PV Jul 14 22:11:53.728866 kernel: Console: colour dummy device 80x25 Jul 14 22:11:53.728874 kernel: ACPI: Core revision 20210730 Jul 14 22:11:53.728882 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Jul 14 22:11:53.728889 kernel: pid_max: default: 32768 minimum: 301 Jul 14 22:11:53.728895 kernel: LSM: Security Framework initializing Jul 14 22:11:53.728903 kernel: SELinux: Initializing. Jul 14 22:11:53.728909 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 14 22:11:53.728916 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 14 22:11:53.728922 kernel: rcu: Hierarchical SRCU implementation. Jul 14 22:11:53.728928 kernel: Platform MSI: ITS@0x8080000 domain created Jul 14 22:11:53.728934 kernel: PCI/MSI: ITS@0x8080000 domain created Jul 14 22:11:53.728940 kernel: Remapping and enabling EFI services. Jul 14 22:11:53.728947 kernel: smp: Bringing up secondary CPUs ... Jul 14 22:11:53.728953 kernel: Detected PIPT I-cache on CPU1 Jul 14 22:11:53.728961 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Jul 14 22:11:53.728967 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Jul 14 22:11:53.728973 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 14 22:11:53.728979 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Jul 14 22:11:53.728986 kernel: Detected PIPT I-cache on CPU2 Jul 14 22:11:53.728992 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Jul 14 22:11:53.728998 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Jul 14 22:11:53.729005 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 14 22:11:53.729011 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Jul 14 22:11:53.729018 kernel: Detected PIPT I-cache on CPU3 Jul 14 22:11:53.729025 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Jul 14 22:11:53.729031 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Jul 14 22:11:53.729037 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 14 22:11:53.729044 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Jul 14 22:11:53.729056 kernel: smp: Brought up 1 node, 4 CPUs Jul 14 22:11:53.729065 kernel: SMP: Total of 4 processors activated. Jul 14 22:11:53.729071 kernel: CPU features: detected: 32-bit EL0 Support Jul 14 22:11:53.729078 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Jul 14 22:11:53.729084 kernel: CPU features: detected: Common not Private translations Jul 14 22:11:53.729091 kernel: CPU features: detected: CRC32 instructions Jul 14 22:11:53.729098 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Jul 14 22:11:53.729104 kernel: CPU features: detected: LSE atomic instructions Jul 14 22:11:53.729112 kernel: CPU features: detected: Privileged Access Never Jul 14 22:11:53.729119 kernel: CPU features: detected: RAS Extension Support Jul 14 22:11:53.729126 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Jul 14 22:11:53.729132 kernel: CPU: All CPU(s) started at EL1 Jul 14 22:11:53.729139 kernel: alternatives: patching kernel code Jul 14 22:11:53.729146 kernel: devtmpfs: initialized Jul 14 22:11:53.729153 kernel: KASLR enabled Jul 14 22:11:53.729159 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 14 22:11:53.729166 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Jul 14 22:11:53.729173 kernel: pinctrl core: initialized pinctrl subsystem Jul 14 22:11:53.729179 kernel: SMBIOS 3.0.0 present. Jul 14 22:11:53.729186 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Jul 14 22:11:53.729193 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 14 22:11:53.729199 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Jul 14 22:11:53.729208 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Jul 14 22:11:53.729214 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Jul 14 22:11:53.729221 kernel: audit: initializing netlink subsys (disabled) Jul 14 22:11:53.729227 kernel: audit: type=2000 audit(0.031:1): state=initialized audit_enabled=0 res=1 Jul 14 22:11:53.729234 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 14 22:11:53.729241 kernel: cpuidle: using governor menu Jul 14 22:11:53.729247 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Jul 14 22:11:53.729254 kernel: ASID allocator initialised with 32768 entries Jul 14 22:11:53.729260 kernel: ACPI: bus type PCI registered Jul 14 22:11:53.729269 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 14 22:11:53.729275 kernel: Serial: AMBA PL011 UART driver Jul 14 22:11:53.729282 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 14 22:11:53.729288 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Jul 14 22:11:53.729295 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 14 22:11:53.729302 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Jul 14 22:11:53.729309 kernel: cryptd: max_cpu_qlen set to 1000 Jul 14 22:11:53.729315 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Jul 14 22:11:53.729322 kernel: ACPI: Added _OSI(Module Device) Jul 14 22:11:53.729330 kernel: ACPI: Added _OSI(Processor Device) Jul 14 22:11:53.729337 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 14 22:11:53.729343 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 14 22:11:53.729350 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 14 22:11:53.729357 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 14 22:11:53.729363 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 14 22:11:53.729370 kernel: ACPI: Interpreter enabled Jul 14 22:11:53.729376 kernel: ACPI: Using GIC for interrupt routing Jul 14 22:11:53.729383 kernel: ACPI: MCFG table detected, 1 entries Jul 14 22:11:53.729391 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Jul 14 22:11:53.729398 kernel: printk: console [ttyAMA0] enabled Jul 14 22:11:53.729404 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 14 22:11:53.729531 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 14 22:11:53.729595 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Jul 14 22:11:53.729655 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Jul 14 22:11:53.729715 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Jul 14 22:11:53.729793 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Jul 14 22:11:53.729802 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Jul 14 22:11:53.729809 kernel: PCI host bridge to bus 0000:00 Jul 14 22:11:53.729879 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Jul 14 22:11:53.729934 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Jul 14 22:11:53.729989 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Jul 14 22:11:53.730043 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 14 22:11:53.730120 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Jul 14 22:11:53.730192 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Jul 14 22:11:53.730254 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Jul 14 22:11:53.730316 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Jul 14 22:11:53.730376 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Jul 14 22:11:53.730448 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Jul 14 22:11:53.730512 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Jul 14 22:11:53.730575 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Jul 14 22:11:53.730629 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Jul 14 22:11:53.730683 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Jul 14 22:11:53.730748 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Jul 14 22:11:53.730761 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Jul 14 22:11:53.730768 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Jul 14 22:11:53.730775 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Jul 14 22:11:53.730784 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Jul 14 22:11:53.730790 kernel: iommu: Default domain type: Translated Jul 14 22:11:53.730797 kernel: iommu: DMA domain TLB invalidation policy: strict mode Jul 14 22:11:53.730804 kernel: vgaarb: loaded Jul 14 22:11:53.730810 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 14 22:11:53.730817 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 14 22:11:53.730824 kernel: PTP clock support registered Jul 14 22:11:53.730830 kernel: Registered efivars operations Jul 14 22:11:53.730837 kernel: clocksource: Switched to clocksource arch_sys_counter Jul 14 22:11:53.730843 kernel: VFS: Disk quotas dquot_6.6.0 Jul 14 22:11:53.730852 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 14 22:11:53.730858 kernel: pnp: PnP ACPI init Jul 14 22:11:53.730966 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Jul 14 22:11:53.730977 kernel: pnp: PnP ACPI: found 1 devices Jul 14 22:11:53.730984 kernel: NET: Registered PF_INET protocol family Jul 14 22:11:53.730991 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 14 22:11:53.730997 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 14 22:11:53.731004 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 14 22:11:53.731013 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 14 22:11:53.731019 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 14 22:11:53.731026 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 14 22:11:53.731033 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 14 22:11:53.731040 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 14 22:11:53.731046 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 14 22:11:53.731053 kernel: PCI: CLS 0 bytes, default 64 Jul 14 22:11:53.731059 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Jul 14 22:11:53.731066 kernel: kvm [1]: HYP mode not available Jul 14 22:11:53.731074 kernel: Initialise system trusted keyrings Jul 14 22:11:53.731080 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 14 22:11:53.731087 kernel: Key type asymmetric registered Jul 14 22:11:53.731093 kernel: Asymmetric key parser 'x509' registered Jul 14 22:11:53.731100 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 14 22:11:53.731106 kernel: io scheduler mq-deadline registered Jul 14 22:11:53.731113 kernel: io scheduler kyber registered Jul 14 22:11:53.731119 kernel: io scheduler bfq registered Jul 14 22:11:53.731126 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Jul 14 22:11:53.731134 kernel: ACPI: button: Power Button [PWRB] Jul 14 22:11:53.731141 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Jul 14 22:11:53.731205 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Jul 14 22:11:53.731214 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 14 22:11:53.731221 kernel: thunder_xcv, ver 1.0 Jul 14 22:11:53.731227 kernel: thunder_bgx, ver 1.0 Jul 14 22:11:53.731234 kernel: nicpf, ver 1.0 Jul 14 22:11:53.731240 kernel: nicvf, ver 1.0 Jul 14 22:11:53.731308 kernel: rtc-efi rtc-efi.0: registered as rtc0 Jul 14 22:11:53.731367 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-07-14T22:11:53 UTC (1752531113) Jul 14 22:11:53.731376 kernel: hid: raw HID events driver (C) Jiri Kosina Jul 14 22:11:53.731383 kernel: NET: Registered PF_INET6 protocol family Jul 14 22:11:53.731389 kernel: Segment Routing with IPv6 Jul 14 22:11:53.731396 kernel: In-situ OAM (IOAM) with IPv6 Jul 14 22:11:53.731402 kernel: NET: Registered PF_PACKET protocol family Jul 14 22:11:53.731409 kernel: Key type dns_resolver registered Jul 14 22:11:53.731421 kernel: registered taskstats version 1 Jul 14 22:11:53.731429 kernel: Loading compiled-in X.509 certificates Jul 14 22:11:53.731436 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.187-flatcar: 118351bb2b1409a8fe1c98db16ecff1bb5342a27' Jul 14 22:11:53.731445 kernel: Key type .fscrypt registered Jul 14 22:11:53.731451 kernel: Key type fscrypt-provisioning registered Jul 14 22:11:53.731458 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 14 22:11:53.731464 kernel: ima: Allocated hash algorithm: sha1 Jul 14 22:11:53.731471 kernel: ima: No architecture policies found Jul 14 22:11:53.731478 kernel: clk: Disabling unused clocks Jul 14 22:11:53.731484 kernel: Freeing unused kernel memory: 36416K Jul 14 22:11:53.731492 kernel: Run /init as init process Jul 14 22:11:53.731498 kernel: with arguments: Jul 14 22:11:53.731505 kernel: /init Jul 14 22:11:53.731511 kernel: with environment: Jul 14 22:11:53.731517 kernel: HOME=/ Jul 14 22:11:53.731524 kernel: TERM=linux Jul 14 22:11:53.731530 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 14 22:11:53.731539 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 14 22:11:53.731549 systemd[1]: Detected virtualization kvm. Jul 14 22:11:53.731556 systemd[1]: Detected architecture arm64. Jul 14 22:11:53.731563 systemd[1]: Running in initrd. Jul 14 22:11:53.731570 systemd[1]: No hostname configured, using default hostname. Jul 14 22:11:53.731577 systemd[1]: Hostname set to . Jul 14 22:11:53.731584 systemd[1]: Initializing machine ID from VM UUID. Jul 14 22:11:53.731591 systemd[1]: Queued start job for default target initrd.target. Jul 14 22:11:53.731598 systemd[1]: Started systemd-ask-password-console.path. Jul 14 22:11:53.731606 systemd[1]: Reached target cryptsetup.target. Jul 14 22:11:53.731613 systemd[1]: Reached target paths.target. Jul 14 22:11:53.731620 systemd[1]: Reached target slices.target. Jul 14 22:11:53.731626 systemd[1]: Reached target swap.target. Jul 14 22:11:53.731633 systemd[1]: Reached target timers.target. Jul 14 22:11:53.731641 systemd[1]: Listening on iscsid.socket. Jul 14 22:11:53.731648 systemd[1]: Listening on iscsiuio.socket. Jul 14 22:11:53.731656 systemd[1]: Listening on systemd-journald-audit.socket. Jul 14 22:11:53.731663 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 14 22:11:53.731670 systemd[1]: Listening on systemd-journald.socket. Jul 14 22:11:53.731677 systemd[1]: Listening on systemd-networkd.socket. Jul 14 22:11:53.731684 systemd[1]: Listening on systemd-udevd-control.socket. Jul 14 22:11:53.731691 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 14 22:11:53.731698 systemd[1]: Reached target sockets.target. Jul 14 22:11:53.731705 systemd[1]: Starting kmod-static-nodes.service... Jul 14 22:11:53.731712 systemd[1]: Finished network-cleanup.service. Jul 14 22:11:53.731720 systemd[1]: Starting systemd-fsck-usr.service... Jul 14 22:11:53.731746 systemd[1]: Starting systemd-journald.service... Jul 14 22:11:53.731753 systemd[1]: Starting systemd-modules-load.service... Jul 14 22:11:53.731760 systemd[1]: Starting systemd-resolved.service... Jul 14 22:11:53.731767 systemd[1]: Starting systemd-vconsole-setup.service... Jul 14 22:11:53.731774 systemd[1]: Finished kmod-static-nodes.service. Jul 14 22:11:53.731781 systemd[1]: Finished systemd-fsck-usr.service. Jul 14 22:11:53.731788 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 14 22:11:53.731795 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 14 22:11:53.731806 systemd-journald[291]: Journal started Jul 14 22:11:53.731845 systemd-journald[291]: Runtime Journal (/run/log/journal/759af370df0640988dfd5fc17dd6e1f9) is 6.0M, max 48.7M, 42.6M free. Jul 14 22:11:53.726977 systemd-modules-load[292]: Inserted module 'overlay' Jul 14 22:11:53.736731 systemd[1]: Started systemd-journald.service. Jul 14 22:11:53.736756 kernel: audit: type=1130 audit(1752531113.732:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:53.732000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:53.736000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:53.737873 systemd[1]: Finished systemd-vconsole-setup.service. Jul 14 22:11:53.741956 kernel: audit: type=1130 audit(1752531113.736:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:53.741000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:53.742040 systemd[1]: Starting dracut-cmdline-ask.service... Jul 14 22:11:53.745967 kernel: audit: type=1130 audit(1752531113.741:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:53.751741 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 14 22:11:53.756616 systemd-modules-load[292]: Inserted module 'br_netfilter' Jul 14 22:11:53.757592 kernel: Bridge firewalling registered Jul 14 22:11:53.760296 systemd-resolved[293]: Positive Trust Anchors: Jul 14 22:11:53.760311 systemd-resolved[293]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 14 22:11:53.760340 systemd-resolved[293]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 14 22:11:53.762832 systemd[1]: Finished dracut-cmdline-ask.service. Jul 14 22:11:53.772204 kernel: audit: type=1130 audit(1752531113.767:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:53.772228 kernel: SCSI subsystem initialized Jul 14 22:11:53.767000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:53.765262 systemd-resolved[293]: Defaulting to hostname 'linux'. Jul 14 22:11:53.776078 kernel: audit: type=1130 audit(1752531113.772:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:53.772000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:53.768829 systemd[1]: Started systemd-resolved.service. Jul 14 22:11:53.773063 systemd[1]: Reached target nss-lookup.target. Jul 14 22:11:53.777659 systemd[1]: Starting dracut-cmdline.service... Jul 14 22:11:53.782745 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 14 22:11:53.782780 kernel: device-mapper: uevent: version 1.0.3 Jul 14 22:11:53.782797 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 14 22:11:53.785231 systemd-modules-load[292]: Inserted module 'dm_multipath' Jul 14 22:11:53.786337 systemd[1]: Finished systemd-modules-load.service. Jul 14 22:11:53.787000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:53.790613 dracut-cmdline[309]: dracut-dracut-053 Jul 14 22:11:53.793204 kernel: audit: type=1130 audit(1752531113.787:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:53.788440 systemd[1]: Starting systemd-sysctl.service... Jul 14 22:11:53.794092 dracut-cmdline[309]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=0fbac260ee8dcd4db6590eed44229ca41387b27ea0fa758fd2be410620d68236 Jul 14 22:11:53.796777 systemd[1]: Finished systemd-sysctl.service. Jul 14 22:11:53.798000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:53.802758 kernel: audit: type=1130 audit(1752531113.798:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:53.857757 kernel: Loading iSCSI transport class v2.0-870. Jul 14 22:11:53.871745 kernel: iscsi: registered transport (tcp) Jul 14 22:11:53.889050 kernel: iscsi: registered transport (qla4xxx) Jul 14 22:11:53.889065 kernel: QLogic iSCSI HBA Driver Jul 14 22:11:53.925158 systemd[1]: Finished dracut-cmdline.service. Jul 14 22:11:53.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:53.926841 systemd[1]: Starting dracut-pre-udev.service... Jul 14 22:11:53.930545 kernel: audit: type=1130 audit(1752531113.925:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:53.973758 kernel: raid6: neonx8 gen() 13601 MB/s Jul 14 22:11:53.990751 kernel: raid6: neonx8 xor() 10667 MB/s Jul 14 22:11:54.007757 kernel: raid6: neonx4 gen() 13478 MB/s Jul 14 22:11:54.024753 kernel: raid6: neonx4 xor() 11092 MB/s Jul 14 22:11:54.041748 kernel: raid6: neonx2 gen() 13057 MB/s Jul 14 22:11:54.058749 kernel: raid6: neonx2 xor() 10234 MB/s Jul 14 22:11:54.075747 kernel: raid6: neonx1 gen() 10501 MB/s Jul 14 22:11:54.092748 kernel: raid6: neonx1 xor() 8741 MB/s Jul 14 22:11:54.109749 kernel: raid6: int64x8 gen() 6228 MB/s Jul 14 22:11:54.126751 kernel: raid6: int64x8 xor() 3511 MB/s Jul 14 22:11:54.143749 kernel: raid6: int64x4 gen() 7135 MB/s Jul 14 22:11:54.160748 kernel: raid6: int64x4 xor() 3811 MB/s Jul 14 22:11:54.177748 kernel: raid6: int64x2 gen() 6052 MB/s Jul 14 22:11:54.194748 kernel: raid6: int64x2 xor() 3281 MB/s Jul 14 22:11:54.211744 kernel: raid6: int64x1 gen() 4984 MB/s Jul 14 22:11:54.228900 kernel: raid6: int64x1 xor() 2616 MB/s Jul 14 22:11:54.228910 kernel: raid6: using algorithm neonx8 gen() 13601 MB/s Jul 14 22:11:54.228919 kernel: raid6: .... xor() 10667 MB/s, rmw enabled Jul 14 22:11:54.230018 kernel: raid6: using neon recovery algorithm Jul 14 22:11:54.241219 kernel: xor: measuring software checksum speed Jul 14 22:11:54.241235 kernel: 8regs : 17188 MB/sec Jul 14 22:11:54.241913 kernel: 32regs : 20707 MB/sec Jul 14 22:11:54.243217 kernel: arm64_neon : 27682 MB/sec Jul 14 22:11:54.243232 kernel: xor: using function: arm64_neon (27682 MB/sec) Jul 14 22:11:54.297746 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Jul 14 22:11:54.307757 systemd[1]: Finished dracut-pre-udev.service. Jul 14 22:11:54.307000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:54.309609 systemd[1]: Starting systemd-udevd.service... Jul 14 22:11:54.312861 kernel: audit: type=1130 audit(1752531114.307:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:54.308000 audit: BPF prog-id=7 op=LOAD Jul 14 22:11:54.308000 audit: BPF prog-id=8 op=LOAD Jul 14 22:11:54.323138 systemd-udevd[492]: Using default interface naming scheme 'v252'. Jul 14 22:11:54.328274 systemd[1]: Started systemd-udevd.service. Jul 14 22:11:54.329000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:54.331043 systemd[1]: Starting dracut-pre-trigger.service... Jul 14 22:11:54.342182 dracut-pre-trigger[501]: rd.md=0: removing MD RAID activation Jul 14 22:11:54.371096 systemd[1]: Finished dracut-pre-trigger.service. Jul 14 22:11:54.371000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:54.372678 systemd[1]: Starting systemd-udev-trigger.service... Jul 14 22:11:54.406691 systemd[1]: Finished systemd-udev-trigger.service. Jul 14 22:11:54.406000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:54.435495 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Jul 14 22:11:54.440205 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 14 22:11:54.440219 kernel: GPT:9289727 != 19775487 Jul 14 22:11:54.440228 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 14 22:11:54.440237 kernel: GPT:9289727 != 19775487 Jul 14 22:11:54.440244 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 14 22:11:54.440253 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 14 22:11:54.453748 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by (udev-worker) (549) Jul 14 22:11:54.456009 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 14 22:11:54.457037 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 14 22:11:54.463122 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 14 22:11:54.466521 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 14 22:11:54.470037 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 14 22:11:54.471759 systemd[1]: Starting disk-uuid.service... Jul 14 22:11:54.477630 disk-uuid[562]: Primary Header is updated. Jul 14 22:11:54.477630 disk-uuid[562]: Secondary Entries is updated. Jul 14 22:11:54.477630 disk-uuid[562]: Secondary Header is updated. Jul 14 22:11:54.481765 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 14 22:11:55.492755 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 14 22:11:55.492967 disk-uuid[563]: The operation has completed successfully. Jul 14 22:11:55.517153 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 14 22:11:55.517899 systemd[1]: Finished disk-uuid.service. Jul 14 22:11:55.518000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:55.518000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:55.522648 systemd[1]: Starting verity-setup.service... Jul 14 22:11:55.535754 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Jul 14 22:11:55.559502 systemd[1]: Found device dev-mapper-usr.device. Jul 14 22:11:55.561940 systemd[1]: Mounting sysusr-usr.mount... Jul 14 22:11:55.563988 systemd[1]: Finished verity-setup.service. Jul 14 22:11:55.564000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:55.621471 systemd[1]: Mounted sysusr-usr.mount. Jul 14 22:11:55.622854 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 14 22:11:55.622361 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 14 22:11:55.623091 systemd[1]: Starting ignition-setup.service... Jul 14 22:11:55.625497 systemd[1]: Starting parse-ip-for-networkd.service... Jul 14 22:11:55.632209 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Jul 14 22:11:55.632248 kernel: BTRFS info (device vda6): using free space tree Jul 14 22:11:55.632262 kernel: BTRFS info (device vda6): has skinny extents Jul 14 22:11:55.643053 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 14 22:11:55.649432 systemd[1]: Finished ignition-setup.service. Jul 14 22:11:55.649000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:55.651741 systemd[1]: Starting ignition-fetch-offline.service... Jul 14 22:11:55.713980 systemd[1]: Finished parse-ip-for-networkd.service. Jul 14 22:11:55.714000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:55.714000 audit: BPF prog-id=9 op=LOAD Jul 14 22:11:55.716133 systemd[1]: Starting systemd-networkd.service... Jul 14 22:11:55.743218 systemd-networkd[737]: lo: Link UP Jul 14 22:11:55.743228 systemd-networkd[737]: lo: Gained carrier Jul 14 22:11:55.744000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:55.743642 systemd-networkd[737]: Enumeration completed Jul 14 22:11:55.743741 systemd[1]: Started systemd-networkd.service. Jul 14 22:11:55.743838 systemd-networkd[737]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 14 22:11:55.744958 systemd-networkd[737]: eth0: Link UP Jul 14 22:11:55.744963 systemd-networkd[737]: eth0: Gained carrier Jul 14 22:11:55.745816 systemd[1]: Reached target network.target. Jul 14 22:11:55.748952 systemd[1]: Starting iscsiuio.service... Jul 14 22:11:55.759427 ignition[656]: Ignition 2.14.0 Jul 14 22:11:55.759438 ignition[656]: Stage: fetch-offline Jul 14 22:11:55.760000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:55.759959 systemd[1]: Started iscsiuio.service. Jul 14 22:11:55.759479 ignition[656]: no configs at "/usr/lib/ignition/base.d" Jul 14 22:11:55.762155 systemd[1]: Starting iscsid.service... Jul 14 22:11:55.759488 ignition[656]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 14 22:11:55.759620 ignition[656]: parsed url from cmdline: "" Jul 14 22:11:55.759624 ignition[656]: no config URL provided Jul 14 22:11:55.767770 iscsid[746]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 14 22:11:55.767770 iscsid[746]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 14 22:11:55.767770 iscsid[746]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 14 22:11:55.767770 iscsid[746]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 14 22:11:55.767770 iscsid[746]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 14 22:11:55.767770 iscsid[746]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 14 22:11:55.775000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:55.759628 ignition[656]: reading system config file "/usr/lib/ignition/user.ign" Jul 14 22:11:55.766814 systemd-networkd[737]: eth0: DHCPv4 address 10.0.0.132/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 14 22:11:55.759636 ignition[656]: no config at "/usr/lib/ignition/user.ign" Jul 14 22:11:55.772818 systemd[1]: Started iscsid.service. Jul 14 22:11:55.759654 ignition[656]: op(1): [started] loading QEMU firmware config module Jul 14 22:11:55.777530 systemd[1]: Starting dracut-initqueue.service... Jul 14 22:11:55.788000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:55.759659 ignition[656]: op(1): executing: "modprobe" "qemu_fw_cfg" Jul 14 22:11:55.787586 systemd[1]: Finished dracut-initqueue.service. Jul 14 22:11:55.767937 ignition[656]: op(1): [finished] loading QEMU firmware config module Jul 14 22:11:55.789317 systemd[1]: Reached target remote-fs-pre.target. Jul 14 22:11:55.767956 ignition[656]: QEMU firmware config was not found. Ignoring... Jul 14 22:11:55.790874 systemd[1]: Reached target remote-cryptsetup.target. Jul 14 22:11:55.792568 systemd[1]: Reached target remote-fs.target. Jul 14 22:11:55.795260 systemd[1]: Starting dracut-pre-mount.service... Jul 14 22:11:55.803471 systemd[1]: Finished dracut-pre-mount.service. Jul 14 22:11:55.803000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:55.830484 ignition[656]: parsing config with SHA512: 20b75b8f976b6d031e5e482a09f6fbc70dd48192c64f5c9cca4d207c547666714ecd42c2b884f958b79a40f8cf60bf832cd81f1ec3ab6ff627c484a004af054a Jul 14 22:11:55.836719 unknown[656]: fetched base config from "system" Jul 14 22:11:55.836744 unknown[656]: fetched user config from "qemu" Jul 14 22:11:55.837211 ignition[656]: fetch-offline: fetch-offline passed Jul 14 22:11:55.839000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:55.838139 systemd[1]: Finished ignition-fetch-offline.service. Jul 14 22:11:55.837268 ignition[656]: Ignition finished successfully Jul 14 22:11:55.839322 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 14 22:11:55.840528 systemd[1]: Starting ignition-kargs.service... Jul 14 22:11:55.849571 ignition[761]: Ignition 2.14.0 Jul 14 22:11:55.849589 ignition[761]: Stage: kargs Jul 14 22:11:55.849682 ignition[761]: no configs at "/usr/lib/ignition/base.d" Jul 14 22:11:55.849691 ignition[761]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 14 22:11:55.850884 ignition[761]: kargs: kargs passed Jul 14 22:11:55.850930 ignition[761]: Ignition finished successfully Jul 14 22:11:55.854000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:55.853704 systemd[1]: Finished ignition-kargs.service. Jul 14 22:11:55.855888 systemd[1]: Starting ignition-disks.service... Jul 14 22:11:55.862940 ignition[767]: Ignition 2.14.0 Jul 14 22:11:55.862950 ignition[767]: Stage: disks Jul 14 22:11:55.863049 ignition[767]: no configs at "/usr/lib/ignition/base.d" Jul 14 22:11:55.865137 systemd[1]: Finished ignition-disks.service. Jul 14 22:11:55.865000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:55.863059 ignition[767]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 14 22:11:55.866689 systemd[1]: Reached target initrd-root-device.target. Jul 14 22:11:55.864083 ignition[767]: disks: disks passed Jul 14 22:11:55.868229 systemd[1]: Reached target local-fs-pre.target. Jul 14 22:11:55.864129 ignition[767]: Ignition finished successfully Jul 14 22:11:55.869900 systemd[1]: Reached target local-fs.target. Jul 14 22:11:55.871303 systemd[1]: Reached target sysinit.target. Jul 14 22:11:55.872479 systemd[1]: Reached target basic.target. Jul 14 22:11:55.874827 systemd[1]: Starting systemd-fsck-root.service... Jul 14 22:11:55.885692 systemd-fsck[775]: ROOT: clean, 619/553520 files, 56022/553472 blocks Jul 14 22:11:55.888875 systemd[1]: Finished systemd-fsck-root.service. Jul 14 22:11:55.889000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:55.890650 systemd[1]: Mounting sysroot.mount... Jul 14 22:11:55.895739 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 14 22:11:55.896081 systemd[1]: Mounted sysroot.mount. Jul 14 22:11:55.896818 systemd[1]: Reached target initrd-root-fs.target. Jul 14 22:11:55.899064 systemd[1]: Mounting sysroot-usr.mount... Jul 14 22:11:55.899975 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 14 22:11:55.900019 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 14 22:11:55.900045 systemd[1]: Reached target ignition-diskful.target. Jul 14 22:11:55.901898 systemd[1]: Mounted sysroot-usr.mount. Jul 14 22:11:55.903670 systemd[1]: Starting initrd-setup-root.service... Jul 14 22:11:55.908129 initrd-setup-root[785]: cut: /sysroot/etc/passwd: No such file or directory Jul 14 22:11:55.912278 initrd-setup-root[793]: cut: /sysroot/etc/group: No such file or directory Jul 14 22:11:55.916627 initrd-setup-root[801]: cut: /sysroot/etc/shadow: No such file or directory Jul 14 22:11:55.920502 initrd-setup-root[809]: cut: /sysroot/etc/gshadow: No such file or directory Jul 14 22:11:55.947886 systemd[1]: Finished initrd-setup-root.service. Jul 14 22:11:55.947000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:55.949484 systemd[1]: Starting ignition-mount.service... Jul 14 22:11:55.950851 systemd[1]: Starting sysroot-boot.service... Jul 14 22:11:55.955620 bash[826]: umount: /sysroot/usr/share/oem: not mounted. Jul 14 22:11:55.964873 ignition[828]: INFO : Ignition 2.14.0 Jul 14 22:11:55.965779 ignition[828]: INFO : Stage: mount Jul 14 22:11:55.966622 ignition[828]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 14 22:11:55.967650 ignition[828]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 14 22:11:55.969112 ignition[828]: INFO : mount: mount passed Jul 14 22:11:55.969861 ignition[828]: INFO : Ignition finished successfully Jul 14 22:11:55.969938 systemd[1]: Finished ignition-mount.service. Jul 14 22:11:55.971000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:55.972760 systemd[1]: Finished sysroot-boot.service. Jul 14 22:11:55.972000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:11:56.571223 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 14 22:11:56.576749 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/vda6 scanned by mount (838) Jul 14 22:11:56.578747 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Jul 14 22:11:56.578762 kernel: BTRFS info (device vda6): using free space tree Jul 14 22:11:56.578771 kernel: BTRFS info (device vda6): has skinny extents Jul 14 22:11:56.582175 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 14 22:11:56.583669 systemd[1]: Starting ignition-files.service... Jul 14 22:11:56.597259 ignition[858]: INFO : Ignition 2.14.0 Jul 14 22:11:56.597259 ignition[858]: INFO : Stage: files Jul 14 22:11:56.598780 ignition[858]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 14 22:11:56.598780 ignition[858]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 14 22:11:56.598780 ignition[858]: DEBUG : files: compiled without relabeling support, skipping Jul 14 22:11:56.602360 ignition[858]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 14 22:11:56.602360 ignition[858]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 14 22:11:56.605926 ignition[858]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 14 22:11:56.607212 ignition[858]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 14 22:11:56.607212 ignition[858]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 14 22:11:56.607212 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-arm64.tar.gz" Jul 14 22:11:56.607212 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.3-linux-arm64.tar.gz: attempt #1 Jul 14 22:11:56.606533 unknown[858]: wrote ssh authorized keys file for user: core Jul 14 22:11:56.914881 systemd-networkd[737]: eth0: Gained IPv6LL Jul 14 22:12:06.672549 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 14 22:12:06.988153 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-arm64.tar.gz" Jul 14 22:12:06.990041 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 14 22:12:06.991789 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 14 22:12:06.991789 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 14 22:12:06.991789 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 14 22:12:06.991789 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 14 22:12:06.991789 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 14 22:12:06.991789 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 14 22:12:06.991789 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 14 22:12:06.991789 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 14 22:12:06.991789 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 14 22:12:06.991789 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Jul 14 22:12:06.991789 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Jul 14 22:12:06.991789 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Jul 14 22:12:06.991789 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-arm64.raw: attempt #1 Jul 14 22:12:37.694536 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 14 22:12:39.013444 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Jul 14 22:12:39.015677 ignition[858]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Jul 14 22:12:39.017003 ignition[858]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 14 22:12:39.019140 ignition[858]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 14 22:12:39.019140 ignition[858]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Jul 14 22:12:39.019140 ignition[858]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Jul 14 22:12:39.019140 ignition[858]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 14 22:12:39.019140 ignition[858]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 14 22:12:39.019140 ignition[858]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Jul 14 22:12:39.019140 ignition[858]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 14 22:12:39.019140 ignition[858]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 14 22:12:39.019140 ignition[858]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Jul 14 22:12:39.019140 ignition[858]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 14 22:12:39.054952 ignition[858]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 14 22:12:39.056696 ignition[858]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Jul 14 22:12:39.056696 ignition[858]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 14 22:12:39.056696 ignition[858]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 14 22:12:39.056696 ignition[858]: INFO : files: files passed Jul 14 22:12:39.056696 ignition[858]: INFO : Ignition finished successfully Jul 14 22:12:39.068566 kernel: kauditd_printk_skb: 23 callbacks suppressed Jul 14 22:12:39.068589 kernel: audit: type=1130 audit(1752531159.057:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.056530 systemd[1]: Finished ignition-files.service. Jul 14 22:12:39.058645 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 14 22:12:39.059972 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 14 22:12:39.070000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.071000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.076096 initrd-setup-root-after-ignition[884]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Jul 14 22:12:39.083056 kernel: audit: type=1130 audit(1752531159.070:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.083080 kernel: audit: type=1131 audit(1752531159.071:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.083097 kernel: audit: type=1130 audit(1752531159.079:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.079000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.060621 systemd[1]: Starting ignition-quench.service... Jul 14 22:12:39.084636 initrd-setup-root-after-ignition[886]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 14 22:12:39.070386 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 14 22:12:39.070700 systemd[1]: Finished ignition-quench.service. Jul 14 22:12:39.073569 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 14 22:12:39.079415 systemd[1]: Reached target ignition-complete.target. Jul 14 22:12:39.084694 systemd[1]: Starting initrd-parse-etc.service... Jul 14 22:12:39.098177 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 14 22:12:39.106045 kernel: audit: type=1130 audit(1752531159.098:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.106070 kernel: audit: type=1131 audit(1752531159.098:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.098000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.098000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.098287 systemd[1]: Finished initrd-parse-etc.service. Jul 14 22:12:39.099348 systemd[1]: Reached target initrd-fs.target. Jul 14 22:12:39.106740 systemd[1]: Reached target initrd.target. Jul 14 22:12:39.108070 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 14 22:12:39.108926 systemd[1]: Starting dracut-pre-pivot.service... Jul 14 22:12:39.119466 systemd[1]: Finished dracut-pre-pivot.service. Jul 14 22:12:39.124616 kernel: audit: type=1130 audit(1752531159.120:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.120000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.121093 systemd[1]: Starting initrd-cleanup.service... Jul 14 22:12:39.129405 systemd[1]: Stopped target nss-lookup.target. Jul 14 22:12:39.130322 systemd[1]: Stopped target remote-cryptsetup.target. Jul 14 22:12:39.131263 systemd[1]: Stopped target timers.target. Jul 14 22:12:39.136000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.132820 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 14 22:12:39.141035 kernel: audit: type=1131 audit(1752531159.136:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.132926 systemd[1]: Stopped dracut-pre-pivot.service. Jul 14 22:12:39.136704 systemd[1]: Stopped target initrd.target. Jul 14 22:12:39.140156 systemd[1]: Stopped target basic.target. Jul 14 22:12:39.141765 systemd[1]: Stopped target ignition-complete.target. Jul 14 22:12:39.143175 systemd[1]: Stopped target ignition-diskful.target. Jul 14 22:12:39.144695 systemd[1]: Stopped target initrd-root-device.target. Jul 14 22:12:39.146079 systemd[1]: Stopped target remote-fs.target. Jul 14 22:12:39.147562 systemd[1]: Stopped target remote-fs-pre.target. Jul 14 22:12:39.149062 systemd[1]: Stopped target sysinit.target. Jul 14 22:12:39.150596 systemd[1]: Stopped target local-fs.target. Jul 14 22:12:39.152041 systemd[1]: Stopped target local-fs-pre.target. Jul 14 22:12:39.156000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.153413 systemd[1]: Stopped target swap.target. Jul 14 22:12:39.162219 kernel: audit: type=1131 audit(1752531159.156:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.154759 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 14 22:12:39.162000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.154876 systemd[1]: Stopped dracut-pre-mount.service. Jul 14 22:12:39.169026 kernel: audit: type=1131 audit(1752531159.162:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.166000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.156301 systemd[1]: Stopped target cryptsetup.target. Jul 14 22:12:39.160052 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 14 22:12:39.160153 systemd[1]: Stopped dracut-initqueue.service. Jul 14 22:12:39.163036 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 14 22:12:39.163130 systemd[1]: Stopped ignition-fetch-offline.service. Jul 14 22:12:39.167370 systemd[1]: Stopped target paths.target. Jul 14 22:12:39.177000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.169695 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 14 22:12:39.178000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.169822 systemd[1]: Stopped systemd-ask-password-console.path. Jul 14 22:12:39.171348 systemd[1]: Stopped target slices.target. Jul 14 22:12:39.173167 systemd[1]: Stopped target sockets.target. Jul 14 22:12:39.185000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.174717 systemd[1]: iscsid.socket: Deactivated successfully. Jul 14 22:12:39.174814 systemd[1]: Closed iscsid.socket. Jul 14 22:12:39.187983 ignition[899]: INFO : Ignition 2.14.0 Jul 14 22:12:39.187983 ignition[899]: INFO : Stage: umount Jul 14 22:12:39.187983 ignition[899]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 14 22:12:39.187983 ignition[899]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 14 22:12:39.187000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.190000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.191000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.176443 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 14 22:12:39.195938 ignition[899]: INFO : umount: umount passed Jul 14 22:12:39.195938 ignition[899]: INFO : Ignition finished successfully Jul 14 22:12:39.193000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.176549 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 14 22:12:39.198000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.178139 systemd[1]: ignition-files.service: Deactivated successfully. Jul 14 22:12:39.201000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.178233 systemd[1]: Stopped ignition-files.service. Jul 14 22:12:39.202000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.180494 systemd[1]: Stopping ignition-mount.service... Jul 14 22:12:39.181384 systemd[1]: Stopping iscsiuio.service... Jul 14 22:12:39.184004 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 14 22:12:39.184143 systemd[1]: Stopped kmod-static-nodes.service. Jul 14 22:12:39.208000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.208000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.186078 systemd[1]: Stopping sysroot-boot.service... Jul 14 22:12:39.208000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.187414 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 14 22:12:39.211000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.187554 systemd[1]: Stopped systemd-udev-trigger.service. Jul 14 22:12:39.212000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.188887 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 14 22:12:39.188997 systemd[1]: Stopped dracut-pre-trigger.service. Jul 14 22:12:39.191663 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 14 22:12:39.216000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.191774 systemd[1]: Stopped iscsiuio.service. Jul 14 22:12:39.193050 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 14 22:12:39.193131 systemd[1]: Stopped ignition-mount.service. Jul 14 22:12:39.219000 audit: BPF prog-id=6 op=UNLOAD Jul 14 22:12:39.195119 systemd[1]: Stopped target network.target. Jul 14 22:12:39.220000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.196603 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 14 22:12:39.222000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.196640 systemd[1]: Closed iscsiuio.socket. Jul 14 22:12:39.223000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.198137 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 14 22:12:39.198183 systemd[1]: Stopped ignition-disks.service. Jul 14 22:12:39.199745 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 14 22:12:39.199788 systemd[1]: Stopped ignition-kargs.service. Jul 14 22:12:39.229000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.201431 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 14 22:12:39.201474 systemd[1]: Stopped ignition-setup.service. Jul 14 22:12:39.203243 systemd[1]: Stopping systemd-networkd.service... Jul 14 22:12:39.232000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.204653 systemd[1]: Stopping systemd-resolved.service... Jul 14 22:12:39.235000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.206755 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 14 22:12:39.235000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.207308 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 14 22:12:39.207390 systemd[1]: Finished initrd-cleanup.service. Jul 14 22:12:39.239000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.208554 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 14 22:12:39.241000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.208644 systemd[1]: Stopped sysroot-boot.service. Jul 14 22:12:39.210433 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 14 22:12:39.243000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.243000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:39.210506 systemd[1]: Stopped initrd-setup-root.service. Jul 14 22:12:39.211520 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 14 22:12:39.211611 systemd[1]: Stopped systemd-resolved.service. Jul 14 22:12:39.213769 systemd-networkd[737]: eth0: DHCPv6 lease lost Jul 14 22:12:39.247000 audit: BPF prog-id=9 op=UNLOAD Jul 14 22:12:39.214876 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 14 22:12:39.214969 systemd[1]: Stopped systemd-networkd.service. Jul 14 22:12:39.216437 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 14 22:12:39.216474 systemd[1]: Closed systemd-networkd.socket. Jul 14 22:12:39.218474 systemd[1]: Stopping network-cleanup.service... Jul 14 22:12:39.220074 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 14 22:12:39.220136 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 14 22:12:39.221658 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 14 22:12:39.221702 systemd[1]: Stopped systemd-sysctl.service. Jul 14 22:12:39.223753 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 14 22:12:39.223795 systemd[1]: Stopped systemd-modules-load.service. Jul 14 22:12:39.224793 systemd[1]: Stopping systemd-udevd.service... Jul 14 22:12:39.226689 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 14 22:12:39.227882 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 14 22:12:39.228029 systemd[1]: Stopped systemd-udevd.service. Jul 14 22:12:39.229524 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 14 22:12:39.229565 systemd[1]: Closed systemd-udevd-control.socket. Jul 14 22:12:39.230843 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 14 22:12:39.230881 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 14 22:12:39.232391 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 14 22:12:39.268439 systemd-journald[291]: Received SIGTERM from PID 1 (systemd). Jul 14 22:12:39.268472 iscsid[746]: iscsid shutting down. Jul 14 22:12:39.232438 systemd[1]: Stopped dracut-pre-udev.service. Jul 14 22:12:39.233838 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 14 22:12:39.233882 systemd[1]: Stopped dracut-cmdline.service. Jul 14 22:12:39.235202 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 14 22:12:39.235245 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 14 22:12:39.237380 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 14 22:12:39.238281 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 14 22:12:39.238347 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 14 22:12:39.240326 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 14 22:12:39.240429 systemd[1]: Stopped network-cleanup.service. Jul 14 22:12:39.242720 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 14 22:12:39.242817 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 14 22:12:39.244076 systemd[1]: Reached target initrd-switch-root.target. Jul 14 22:12:39.246303 systemd[1]: Starting initrd-switch-root.service... Jul 14 22:12:39.252767 systemd[1]: Switching root. Jul 14 22:12:39.277458 systemd-journald[291]: Journal stopped Jul 14 22:12:41.261128 kernel: SELinux: Class mctp_socket not defined in policy. Jul 14 22:12:41.261186 kernel: SELinux: Class anon_inode not defined in policy. Jul 14 22:12:41.261197 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 14 22:12:41.261207 kernel: SELinux: policy capability network_peer_controls=1 Jul 14 22:12:41.261217 kernel: SELinux: policy capability open_perms=1 Jul 14 22:12:41.261227 kernel: SELinux: policy capability extended_socket_class=1 Jul 14 22:12:41.261237 kernel: SELinux: policy capability always_check_network=0 Jul 14 22:12:41.261246 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 14 22:12:41.261256 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 14 22:12:41.261277 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 14 22:12:41.261288 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 14 22:12:41.261304 systemd[1]: Successfully loaded SELinux policy in 38.552ms. Jul 14 22:12:41.261325 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 7.964ms. Jul 14 22:12:41.261338 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 14 22:12:41.261349 systemd[1]: Detected virtualization kvm. Jul 14 22:12:41.261360 systemd[1]: Detected architecture arm64. Jul 14 22:12:41.261370 systemd[1]: Detected first boot. Jul 14 22:12:41.261382 systemd[1]: Initializing machine ID from VM UUID. Jul 14 22:12:41.261393 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 14 22:12:41.261403 systemd[1]: Populated /etc with preset unit settings. Jul 14 22:12:41.261414 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 14 22:12:41.261425 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 14 22:12:41.261437 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 14 22:12:41.261448 systemd[1]: iscsid.service: Deactivated successfully. Jul 14 22:12:41.261464 systemd[1]: Stopped iscsid.service. Jul 14 22:12:41.261474 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 14 22:12:41.261485 systemd[1]: Stopped initrd-switch-root.service. Jul 14 22:12:41.261497 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 14 22:12:41.261507 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 14 22:12:41.261519 systemd[1]: Created slice system-addon\x2drun.slice. Jul 14 22:12:41.261529 systemd[1]: Created slice system-getty.slice. Jul 14 22:12:41.261540 systemd[1]: Created slice system-modprobe.slice. Jul 14 22:12:41.261551 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 14 22:12:41.261562 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 14 22:12:41.261578 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 14 22:12:41.261589 systemd[1]: Created slice user.slice. Jul 14 22:12:41.261599 systemd[1]: Started systemd-ask-password-console.path. Jul 14 22:12:41.261610 systemd[1]: Started systemd-ask-password-wall.path. Jul 14 22:12:41.261622 systemd[1]: Set up automount boot.automount. Jul 14 22:12:41.261633 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 14 22:12:41.261643 systemd[1]: Stopped target initrd-switch-root.target. Jul 14 22:12:41.261654 systemd[1]: Stopped target initrd-fs.target. Jul 14 22:12:41.261664 systemd[1]: Stopped target initrd-root-fs.target. Jul 14 22:12:41.261674 systemd[1]: Reached target integritysetup.target. Jul 14 22:12:41.261685 systemd[1]: Reached target remote-cryptsetup.target. Jul 14 22:12:41.261695 systemd[1]: Reached target remote-fs.target. Jul 14 22:12:41.261707 systemd[1]: Reached target slices.target. Jul 14 22:12:41.261737 systemd[1]: Reached target swap.target. Jul 14 22:12:41.261749 systemd[1]: Reached target torcx.target. Jul 14 22:12:41.261759 systemd[1]: Reached target veritysetup.target. Jul 14 22:12:41.261770 systemd[1]: Listening on systemd-coredump.socket. Jul 14 22:12:41.261780 systemd[1]: Listening on systemd-initctl.socket. Jul 14 22:12:41.261795 systemd[1]: Listening on systemd-networkd.socket. Jul 14 22:12:41.261805 systemd[1]: Listening on systemd-udevd-control.socket. Jul 14 22:12:41.261816 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 14 22:12:41.261829 systemd[1]: Listening on systemd-userdbd.socket. Jul 14 22:12:41.261840 systemd[1]: Mounting dev-hugepages.mount... Jul 14 22:12:41.261850 systemd[1]: Mounting dev-mqueue.mount... Jul 14 22:12:41.261861 systemd[1]: Mounting media.mount... Jul 14 22:12:41.261872 systemd[1]: Mounting sys-kernel-debug.mount... Jul 14 22:12:41.261882 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 14 22:12:41.261893 systemd[1]: Mounting tmp.mount... Jul 14 22:12:41.261903 systemd[1]: Starting flatcar-tmpfiles.service... Jul 14 22:12:41.261913 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 14 22:12:41.261925 systemd[1]: Starting kmod-static-nodes.service... Jul 14 22:12:41.261935 systemd[1]: Starting modprobe@configfs.service... Jul 14 22:12:41.261945 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 22:12:41.261955 systemd[1]: Starting modprobe@drm.service... Jul 14 22:12:41.261966 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 22:12:41.261976 systemd[1]: Starting modprobe@fuse.service... Jul 14 22:12:41.261986 systemd[1]: Starting modprobe@loop.service... Jul 14 22:12:41.261997 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 14 22:12:41.262007 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 14 22:12:41.262019 systemd[1]: Stopped systemd-fsck-root.service. Jul 14 22:12:41.262030 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 14 22:12:41.262040 systemd[1]: Stopped systemd-fsck-usr.service. Jul 14 22:12:41.262051 systemd[1]: Stopped systemd-journald.service. Jul 14 22:12:41.262062 systemd[1]: Starting systemd-journald.service... Jul 14 22:12:41.262072 kernel: loop: module loaded Jul 14 22:12:41.262085 systemd[1]: Starting systemd-modules-load.service... Jul 14 22:12:41.262097 systemd[1]: Starting systemd-network-generator.service... Jul 14 22:12:41.262107 kernel: fuse: init (API version 7.34) Jul 14 22:12:41.262119 systemd[1]: Starting systemd-remount-fs.service... Jul 14 22:12:41.262130 systemd[1]: Starting systemd-udev-trigger.service... Jul 14 22:12:41.262140 systemd[1]: verity-setup.service: Deactivated successfully. Jul 14 22:12:41.262153 systemd[1]: Stopped verity-setup.service. Jul 14 22:12:41.262164 systemd[1]: Mounted dev-hugepages.mount. Jul 14 22:12:41.262174 systemd[1]: Mounted dev-mqueue.mount. Jul 14 22:12:41.262185 systemd[1]: Mounted media.mount. Jul 14 22:12:41.262196 systemd[1]: Mounted sys-kernel-debug.mount. Jul 14 22:12:41.262209 systemd-journald[995]: Journal started Jul 14 22:12:41.262248 systemd-journald[995]: Runtime Journal (/run/log/journal/759af370df0640988dfd5fc17dd6e1f9) is 6.0M, max 48.7M, 42.6M free. Jul 14 22:12:41.262292 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 14 22:12:39.332000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 14 22:12:39.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 14 22:12:39.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 14 22:12:39.402000 audit: BPF prog-id=10 op=LOAD Jul 14 22:12:39.402000 audit: BPF prog-id=10 op=UNLOAD Jul 14 22:12:39.402000 audit: BPF prog-id=11 op=LOAD Jul 14 22:12:39.402000 audit: BPF prog-id=11 op=UNLOAD Jul 14 22:12:39.450000 audit[933]: AVC avc: denied { associate } for pid=933 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 14 22:12:39.450000 audit[933]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001fb8e4 a1=4000028e40 a2=4000027080 a3=32 items=0 ppid=916 pid=933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:39.450000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 14 22:12:39.451000 audit[933]: AVC avc: denied { associate } for pid=933 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 14 22:12:39.451000 audit[933]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001fb9b9 a2=1ed a3=0 items=2 ppid=916 pid=933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:39.451000 audit: CWD cwd="/" Jul 14 22:12:39.451000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:12:39.451000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:12:39.451000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 14 22:12:41.111000 audit: BPF prog-id=12 op=LOAD Jul 14 22:12:41.111000 audit: BPF prog-id=3 op=UNLOAD Jul 14 22:12:41.111000 audit: BPF prog-id=13 op=LOAD Jul 14 22:12:41.111000 audit: BPF prog-id=14 op=LOAD Jul 14 22:12:41.111000 audit: BPF prog-id=4 op=UNLOAD Jul 14 22:12:41.111000 audit: BPF prog-id=5 op=UNLOAD Jul 14 22:12:41.111000 audit: BPF prog-id=15 op=LOAD Jul 14 22:12:41.111000 audit: BPF prog-id=12 op=UNLOAD Jul 14 22:12:41.111000 audit: BPF prog-id=16 op=LOAD Jul 14 22:12:41.111000 audit: BPF prog-id=17 op=LOAD Jul 14 22:12:41.111000 audit: BPF prog-id=13 op=UNLOAD Jul 14 22:12:41.111000 audit: BPF prog-id=14 op=UNLOAD Jul 14 22:12:41.112000 audit: BPF prog-id=18 op=LOAD Jul 14 22:12:41.112000 audit: BPF prog-id=15 op=UNLOAD Jul 14 22:12:41.113000 audit: BPF prog-id=19 op=LOAD Jul 14 22:12:41.113000 audit: BPF prog-id=20 op=LOAD Jul 14 22:12:41.113000 audit: BPF prog-id=16 op=UNLOAD Jul 14 22:12:41.113000 audit: BPF prog-id=17 op=UNLOAD Jul 14 22:12:41.113000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.116000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.118000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.118000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.125000 audit: BPF prog-id=18 op=UNLOAD Jul 14 22:12:41.231000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.233000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.235000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.235000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.235000 audit: BPF prog-id=21 op=LOAD Jul 14 22:12:41.235000 audit: BPF prog-id=22 op=LOAD Jul 14 22:12:41.235000 audit: BPF prog-id=23 op=LOAD Jul 14 22:12:41.235000 audit: BPF prog-id=19 op=UNLOAD Jul 14 22:12:41.235000 audit: BPF prog-id=20 op=UNLOAD Jul 14 22:12:41.254000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.259000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 14 22:12:41.259000 audit[995]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=3 a1=ffffcf24c600 a2=4000 a3=1 items=0 ppid=1 pid=995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:41.259000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 14 22:12:39.449058 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-14T22:12:39Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.101 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.101 /var/lib/torcx/store]" Jul 14 22:12:41.110530 systemd[1]: Queued start job for default target multi-user.target. Jul 14 22:12:39.449319 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-14T22:12:39Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 14 22:12:41.110542 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 14 22:12:39.449340 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-14T22:12:39Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 14 22:12:41.114305 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 14 22:12:39.449371 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-14T22:12:39Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 14 22:12:39.449380 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-14T22:12:39Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 14 22:12:39.449406 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-14T22:12:39Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 14 22:12:39.449417 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-14T22:12:39Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 14 22:12:39.449711 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-14T22:12:39Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 14 22:12:39.449779 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-14T22:12:39Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 14 22:12:39.449791 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-14T22:12:39Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 14 22:12:39.450558 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-14T22:12:39Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 14 22:12:39.450590 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-14T22:12:39Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 14 22:12:39.450609 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-14T22:12:39Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.101: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.101 Jul 14 22:12:39.450623 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-14T22:12:39Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 14 22:12:39.450639 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-14T22:12:39Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.101: no such file or directory" path=/var/lib/torcx/store/3510.3.101 Jul 14 22:12:39.450652 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-14T22:12:39Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 14 22:12:40.866493 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-14T22:12:40Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 14 22:12:40.866788 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-14T22:12:40Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 14 22:12:40.866898 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-14T22:12:40Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 14 22:12:40.867058 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-14T22:12:40Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 14 22:12:40.867108 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-14T22:12:40Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 14 22:12:40.867164 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-14T22:12:40Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 14 22:12:41.265325 systemd[1]: Started systemd-journald.service. Jul 14 22:12:41.265000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.265853 systemd[1]: Mounted tmp.mount. Jul 14 22:12:41.266927 systemd[1]: Finished kmod-static-nodes.service. Jul 14 22:12:41.267000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.268035 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 14 22:12:41.268192 systemd[1]: Finished modprobe@configfs.service. Jul 14 22:12:41.268000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.268000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.269317 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 22:12:41.269477 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 22:12:41.270000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.270000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.270568 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 14 22:12:41.270765 systemd[1]: Finished modprobe@drm.service. Jul 14 22:12:41.270000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.270000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.271814 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 22:12:41.271967 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 22:12:41.272000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.272000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.273320 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 14 22:12:41.273451 systemd[1]: Finished modprobe@fuse.service. Jul 14 22:12:41.274000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.274000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.274568 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 22:12:41.274689 systemd[1]: Finished modprobe@loop.service. Jul 14 22:12:41.275000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.275000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.275808 systemd[1]: Finished systemd-modules-load.service. Jul 14 22:12:41.275000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.277004 systemd[1]: Finished systemd-network-generator.service. Jul 14 22:12:41.277000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.278308 systemd[1]: Finished systemd-remount-fs.service. Jul 14 22:12:41.279000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.279749 systemd[1]: Reached target network-pre.target. Jul 14 22:12:41.282035 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 14 22:12:41.284092 systemd[1]: Mounting sys-kernel-config.mount... Jul 14 22:12:41.284855 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 14 22:12:41.289543 systemd[1]: Starting systemd-hwdb-update.service... Jul 14 22:12:41.291496 systemd[1]: Starting systemd-journal-flush.service... Jul 14 22:12:41.292448 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 14 22:12:41.293442 systemd[1]: Starting systemd-random-seed.service... Jul 14 22:12:41.294382 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 14 22:12:41.295450 systemd[1]: Starting systemd-sysctl.service... Jul 14 22:12:41.297530 systemd[1]: Finished flatcar-tmpfiles.service. Jul 14 22:12:41.297674 systemd-journald[995]: Time spent on flushing to /var/log/journal/759af370df0640988dfd5fc17dd6e1f9 is 25.239ms for 996 entries. Jul 14 22:12:41.297674 systemd-journald[995]: System Journal (/var/log/journal/759af370df0640988dfd5fc17dd6e1f9) is 8.0M, max 195.6M, 187.6M free. Jul 14 22:12:41.333156 systemd-journald[995]: Received client request to flush runtime journal. Jul 14 22:12:41.299000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.304000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.320000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.330000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.332000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.301337 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 14 22:12:41.302672 systemd[1]: Mounted sys-kernel-config.mount. Jul 14 22:12:41.304185 systemd[1]: Finished systemd-random-seed.service. Jul 14 22:12:41.334591 udevadm[1035]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Jul 14 22:12:41.305321 systemd[1]: Reached target first-boot-complete.target. Jul 14 22:12:41.307505 systemd[1]: Starting systemd-sysusers.service... Jul 14 22:12:41.319013 systemd[1]: Finished systemd-udev-trigger.service. Jul 14 22:12:41.321781 systemd[1]: Starting systemd-udev-settle.service... Jul 14 22:12:41.329235 systemd[1]: Finished systemd-sysctl.service. Jul 14 22:12:41.331376 systemd[1]: Finished systemd-sysusers.service. Jul 14 22:12:41.334290 systemd[1]: Finished systemd-journal-flush.service. Jul 14 22:12:41.335000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.683198 systemd[1]: Finished systemd-hwdb-update.service. Jul 14 22:12:41.683000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.684000 audit: BPF prog-id=24 op=LOAD Jul 14 22:12:41.684000 audit: BPF prog-id=25 op=LOAD Jul 14 22:12:41.684000 audit: BPF prog-id=7 op=UNLOAD Jul 14 22:12:41.684000 audit: BPF prog-id=8 op=UNLOAD Jul 14 22:12:41.685697 systemd[1]: Starting systemd-udevd.service... Jul 14 22:12:41.701432 systemd-udevd[1037]: Using default interface naming scheme 'v252'. Jul 14 22:12:41.714435 systemd[1]: Started systemd-udevd.service. Jul 14 22:12:41.714000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.716000 audit: BPF prog-id=26 op=LOAD Jul 14 22:12:41.717157 systemd[1]: Starting systemd-networkd.service... Jul 14 22:12:41.721000 audit: BPF prog-id=27 op=LOAD Jul 14 22:12:41.721000 audit: BPF prog-id=28 op=LOAD Jul 14 22:12:41.721000 audit: BPF prog-id=29 op=LOAD Jul 14 22:12:41.723136 systemd[1]: Starting systemd-userdbd.service... Jul 14 22:12:41.748356 systemd[1]: Started systemd-userdbd.service. Jul 14 22:12:41.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.750170 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Jul 14 22:12:41.795571 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 14 22:12:41.815493 systemd-networkd[1039]: lo: Link UP Jul 14 22:12:41.815502 systemd-networkd[1039]: lo: Gained carrier Jul 14 22:12:41.815974 systemd-networkd[1039]: Enumeration completed Jul 14 22:12:41.816078 systemd[1]: Started systemd-networkd.service. Jul 14 22:12:41.816229 systemd-networkd[1039]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 14 22:12:41.815000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.819010 systemd-networkd[1039]: eth0: Link UP Jul 14 22:12:41.819017 systemd-networkd[1039]: eth0: Gained carrier Jul 14 22:12:41.832212 systemd[1]: Finished systemd-udev-settle.service. Jul 14 22:12:41.832000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.834650 systemd[1]: Starting lvm2-activation-early.service... Jul 14 22:12:41.836914 systemd-networkd[1039]: eth0: DHCPv4 address 10.0.0.132/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 14 22:12:41.849564 lvm[1070]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 14 22:12:41.877671 systemd[1]: Finished lvm2-activation-early.service. Jul 14 22:12:41.877000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.878848 systemd[1]: Reached target cryptsetup.target. Jul 14 22:12:41.881128 systemd[1]: Starting lvm2-activation.service... Jul 14 22:12:41.885857 lvm[1071]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 14 22:12:41.912714 systemd[1]: Finished lvm2-activation.service. Jul 14 22:12:41.912000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.913817 systemd[1]: Reached target local-fs-pre.target. Jul 14 22:12:41.914752 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 14 22:12:41.914787 systemd[1]: Reached target local-fs.target. Jul 14 22:12:41.915631 systemd[1]: Reached target machines.target. Jul 14 22:12:41.917842 systemd[1]: Starting ldconfig.service... Jul 14 22:12:41.919124 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 22:12:41.919189 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 22:12:41.920654 systemd[1]: Starting systemd-boot-update.service... Jul 14 22:12:41.922946 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 14 22:12:41.926548 systemd[1]: Starting systemd-machine-id-commit.service... Jul 14 22:12:41.928875 systemd[1]: Starting systemd-sysext.service... Jul 14 22:12:41.933806 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1073 (bootctl) Jul 14 22:12:41.935196 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 14 22:12:41.937000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:41.936999 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 14 22:12:41.950786 systemd[1]: Unmounting usr-share-oem.mount... Jul 14 22:12:41.958963 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 14 22:12:41.959169 systemd[1]: Unmounted usr-share-oem.mount. Jul 14 22:12:42.022742 kernel: loop0: detected capacity change from 0 to 211168 Jul 14 22:12:42.024694 systemd[1]: Finished systemd-machine-id-commit.service. Jul 14 22:12:42.024000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.038761 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 14 22:12:42.042977 systemd-fsck[1080]: fsck.fat 4.2 (2021-01-31) Jul 14 22:12:42.042977 systemd-fsck[1080]: /dev/vda1: 236 files, 117310/258078 clusters Jul 14 22:12:42.046421 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 14 22:12:42.046000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.065758 kernel: loop1: detected capacity change from 0 to 211168 Jul 14 22:12:42.074811 (sd-sysext)[1085]: Using extensions 'kubernetes'. Jul 14 22:12:42.075567 (sd-sysext)[1085]: Merged extensions into '/usr'. Jul 14 22:12:42.094029 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 14 22:12:42.095690 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 22:12:42.097869 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 22:12:42.100261 systemd[1]: Starting modprobe@loop.service... Jul 14 22:12:42.101404 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 22:12:42.101592 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 22:12:42.102483 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 22:12:42.102620 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 22:12:42.103000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.103000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.104257 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 22:12:42.104442 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 22:12:42.105000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.105000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.105938 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 22:12:42.106061 systemd[1]: Finished modprobe@loop.service. Jul 14 22:12:42.106000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.106000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.107553 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 14 22:12:42.107654 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 14 22:12:42.152456 ldconfig[1072]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 14 22:12:42.155535 systemd[1]: Finished ldconfig.service. Jul 14 22:12:42.156000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.255546 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 14 22:12:42.257384 systemd[1]: Mounting boot.mount... Jul 14 22:12:42.259625 systemd[1]: Mounting usr-share-oem.mount... Jul 14 22:12:42.265828 systemd[1]: Mounted boot.mount. Jul 14 22:12:42.266855 systemd[1]: Mounted usr-share-oem.mount. Jul 14 22:12:42.268992 systemd[1]: Finished systemd-sysext.service. Jul 14 22:12:42.269000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.271524 systemd[1]: Starting ensure-sysext.service... Jul 14 22:12:42.273892 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 14 22:12:42.277000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.277147 systemd[1]: Finished systemd-boot-update.service. Jul 14 22:12:42.279826 systemd[1]: Reloading. Jul 14 22:12:42.285535 systemd-tmpfiles[1093]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 14 22:12:42.287316 systemd-tmpfiles[1093]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 14 22:12:42.289996 systemd-tmpfiles[1093]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 14 22:12:42.324818 /usr/lib/systemd/system-generators/torcx-generator[1113]: time="2025-07-14T22:12:42Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.101 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.101 /var/lib/torcx/store]" Jul 14 22:12:42.324851 /usr/lib/systemd/system-generators/torcx-generator[1113]: time="2025-07-14T22:12:42Z" level=info msg="torcx already run" Jul 14 22:12:42.387348 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 14 22:12:42.387368 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 14 22:12:42.404431 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 14 22:12:42.449000 audit: BPF prog-id=30 op=LOAD Jul 14 22:12:42.449000 audit: BPF prog-id=31 op=LOAD Jul 14 22:12:42.449000 audit: BPF prog-id=24 op=UNLOAD Jul 14 22:12:42.449000 audit: BPF prog-id=25 op=UNLOAD Jul 14 22:12:42.451000 audit: BPF prog-id=32 op=LOAD Jul 14 22:12:42.451000 audit: BPF prog-id=27 op=UNLOAD Jul 14 22:12:42.451000 audit: BPF prog-id=33 op=LOAD Jul 14 22:12:42.451000 audit: BPF prog-id=34 op=LOAD Jul 14 22:12:42.451000 audit: BPF prog-id=28 op=UNLOAD Jul 14 22:12:42.451000 audit: BPF prog-id=29 op=UNLOAD Jul 14 22:12:42.452000 audit: BPF prog-id=35 op=LOAD Jul 14 22:12:42.452000 audit: BPF prog-id=21 op=UNLOAD Jul 14 22:12:42.452000 audit: BPF prog-id=36 op=LOAD Jul 14 22:12:42.453000 audit: BPF prog-id=37 op=LOAD Jul 14 22:12:42.453000 audit: BPF prog-id=22 op=UNLOAD Jul 14 22:12:42.453000 audit: BPF prog-id=23 op=UNLOAD Jul 14 22:12:42.454000 audit: BPF prog-id=38 op=LOAD Jul 14 22:12:42.454000 audit: BPF prog-id=26 op=UNLOAD Jul 14 22:12:42.457536 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 14 22:12:42.458000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.464653 systemd[1]: Starting audit-rules.service... Jul 14 22:12:42.467850 systemd[1]: Starting clean-ca-certificates.service... Jul 14 22:12:42.471206 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 14 22:12:42.480000 audit: BPF prog-id=39 op=LOAD Jul 14 22:12:42.482931 systemd[1]: Starting systemd-resolved.service... Jul 14 22:12:42.486000 audit: BPF prog-id=40 op=LOAD Jul 14 22:12:42.489170 systemd[1]: Starting systemd-timesyncd.service... Jul 14 22:12:42.492351 systemd[1]: Starting systemd-update-utmp.service... Jul 14 22:12:42.500220 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 14 22:12:42.502339 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 22:12:42.505322 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 22:12:42.507974 systemd[1]: Starting modprobe@loop.service... Jul 14 22:12:42.508893 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 22:12:42.509059 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 22:12:42.510352 systemd[1]: Finished clean-ca-certificates.service. Jul 14 22:12:42.511000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.511983 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 22:12:42.512170 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 22:12:42.513000 audit[1163]: SYSTEM_BOOT pid=1163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.513000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.513000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.513975 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 22:12:42.514110 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 22:12:42.515000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.515000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.515855 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 22:12:42.515982 systemd[1]: Finished modprobe@loop.service. Jul 14 22:12:42.516000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.516000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.520973 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 14 22:12:42.521000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.522617 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 14 22:12:42.524500 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 22:12:42.526886 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 22:12:42.529340 systemd[1]: Starting modprobe@loop.service... Jul 14 22:12:42.530270 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 22:12:42.530512 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 22:12:42.532544 systemd[1]: Starting systemd-update-done.service... Jul 14 22:12:42.533485 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 14 22:12:42.535109 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 22:12:42.535257 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 22:12:42.536000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.536000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.536808 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 22:12:42.536936 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 22:12:42.537000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.537000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.538394 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 22:12:42.538550 systemd[1]: Finished modprobe@loop.service. Jul 14 22:12:42.539000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.539000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.540171 systemd[1]: Finished systemd-update-done.service. Jul 14 22:12:42.541000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:42.544380 systemd[1]: Finished systemd-update-utmp.service. Jul 14 22:12:42.543000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 14 22:12:42.543000 audit[1179]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff17ace10 a2=420 a3=0 items=0 ppid=1152 pid=1179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:42.543000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 14 22:12:42.545081 augenrules[1179]: No rules Jul 14 22:12:42.547071 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 14 22:12:42.548581 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 22:12:42.550621 systemd[1]: Starting modprobe@drm.service... Jul 14 22:12:42.552782 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 22:12:42.555042 systemd[1]: Starting modprobe@loop.service... Jul 14 22:12:42.555973 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 22:12:42.556032 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 22:12:42.557405 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 14 22:12:42.558492 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 14 22:12:42.559291 systemd[1]: Finished ensure-sysext.service. Jul 14 22:12:42.560509 systemd[1]: Finished audit-rules.service. Jul 14 22:12:42.561646 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 22:12:42.561831 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 22:12:42.563117 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 14 22:12:42.563254 systemd[1]: Finished modprobe@drm.service. Jul 14 22:12:42.564168 systemd-resolved[1159]: Positive Trust Anchors: Jul 14 22:12:42.564180 systemd-resolved[1159]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 14 22:12:42.564207 systemd-resolved[1159]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 14 22:12:42.564458 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 22:12:42.564576 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 22:12:42.566197 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 22:12:42.566338 systemd[1]: Finished modprobe@loop.service. Jul 14 22:12:42.568624 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 14 22:12:42.568676 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 14 22:12:42.576830 systemd[1]: Started systemd-timesyncd.service. Jul 14 22:12:42.578055 systemd-timesyncd[1162]: Contacted time server 10.0.0.1:123 (10.0.0.1). Jul 14 22:12:42.578359 systemd[1]: Reached target time-set.target. Jul 14 22:12:42.578502 systemd-timesyncd[1162]: Initial clock synchronization to Mon 2025-07-14 22:12:42.899271 UTC. Jul 14 22:12:42.585057 systemd-resolved[1159]: Defaulting to hostname 'linux'. Jul 14 22:12:42.586615 systemd[1]: Started systemd-resolved.service. Jul 14 22:12:42.587543 systemd[1]: Reached target network.target. Jul 14 22:12:42.588351 systemd[1]: Reached target nss-lookup.target. Jul 14 22:12:42.589214 systemd[1]: Reached target sysinit.target. Jul 14 22:12:42.590103 systemd[1]: Started motdgen.path. Jul 14 22:12:42.590851 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 14 22:12:42.592091 systemd[1]: Started logrotate.timer. Jul 14 22:12:42.592944 systemd[1]: Started mdadm.timer. Jul 14 22:12:42.593620 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 14 22:12:42.594537 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 14 22:12:42.594570 systemd[1]: Reached target paths.target. Jul 14 22:12:42.595316 systemd[1]: Reached target timers.target. Jul 14 22:12:42.596452 systemd[1]: Listening on dbus.socket. Jul 14 22:12:42.598377 systemd[1]: Starting docker.socket... Jul 14 22:12:42.601674 systemd[1]: Listening on sshd.socket. Jul 14 22:12:42.602709 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 22:12:42.603402 systemd[1]: Listening on docker.socket. Jul 14 22:12:42.604259 systemd[1]: Reached target sockets.target. Jul 14 22:12:42.605054 systemd[1]: Reached target basic.target. Jul 14 22:12:42.605855 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 14 22:12:42.605887 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 14 22:12:42.607055 systemd[1]: Starting containerd.service... Jul 14 22:12:42.608863 systemd[1]: Starting dbus.service... Jul 14 22:12:42.610596 systemd[1]: Starting enable-oem-cloudinit.service... Jul 14 22:12:42.612704 systemd[1]: Starting extend-filesystems.service... Jul 14 22:12:42.613640 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 14 22:12:42.615065 systemd[1]: Starting motdgen.service... Jul 14 22:12:42.618224 systemd[1]: Starting prepare-helm.service... Jul 14 22:12:42.621076 jq[1194]: false Jul 14 22:12:42.620115 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 14 22:12:42.622384 systemd[1]: Starting sshd-keygen.service... Jul 14 22:12:42.625595 systemd[1]: Starting systemd-logind.service... Jul 14 22:12:42.626395 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 22:12:42.626598 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 14 22:12:42.627086 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 14 22:12:42.627831 systemd[1]: Starting update-engine.service... Jul 14 22:12:42.630576 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 14 22:12:42.633621 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 14 22:12:42.633854 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 14 22:12:42.635225 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 14 22:12:42.635406 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 14 22:12:42.636232 jq[1209]: true Jul 14 22:12:42.638415 extend-filesystems[1195]: Found loop1 Jul 14 22:12:42.650936 tar[1211]: linux-arm64/LICENSE Jul 14 22:12:42.651386 tar[1211]: linux-arm64/helm Jul 14 22:12:42.651862 jq[1212]: true Jul 14 22:12:42.652283 systemd[1]: motdgen.service: Deactivated successfully. Jul 14 22:12:42.652466 systemd[1]: Finished motdgen.service. Jul 14 22:12:42.652686 extend-filesystems[1195]: Found vda Jul 14 22:12:42.654933 extend-filesystems[1195]: Found vda1 Jul 14 22:12:42.655743 extend-filesystems[1195]: Found vda2 Jul 14 22:12:42.656650 extend-filesystems[1195]: Found vda3 Jul 14 22:12:42.657707 extend-filesystems[1195]: Found usr Jul 14 22:12:42.658737 extend-filesystems[1195]: Found vda4 Jul 14 22:12:42.659651 extend-filesystems[1195]: Found vda6 Jul 14 22:12:42.660760 extend-filesystems[1195]: Found vda7 Jul 14 22:12:42.660760 extend-filesystems[1195]: Found vda9 Jul 14 22:12:42.660760 extend-filesystems[1195]: Checking size of /dev/vda9 Jul 14 22:12:42.678637 dbus-daemon[1193]: [system] SELinux support is enabled Jul 14 22:12:42.681346 systemd[1]: Started dbus.service. Jul 14 22:12:42.684577 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 14 22:12:42.684631 systemd[1]: Reached target system-config.target. Jul 14 22:12:42.685615 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 14 22:12:42.685657 systemd[1]: Reached target user-config.target. Jul 14 22:12:42.702989 extend-filesystems[1195]: Resized partition /dev/vda9 Jul 14 22:12:42.714912 extend-filesystems[1243]: resize2fs 1.46.5 (30-Dec-2021) Jul 14 22:12:42.740746 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Jul 14 22:12:42.741794 systemd-logind[1204]: Watching system buttons on /dev/input/event0 (Power Button) Jul 14 22:12:42.742071 systemd-logind[1204]: New seat seat0. Jul 14 22:12:42.745434 systemd[1]: Started systemd-logind.service. Jul 14 22:12:42.756151 update_engine[1207]: I0714 22:12:42.755256 1207 main.cc:92] Flatcar Update Engine starting Jul 14 22:12:42.759476 bash[1240]: Updated "/home/core/.ssh/authorized_keys" Jul 14 22:12:42.759997 update_engine[1207]: I0714 22:12:42.759429 1207 update_check_scheduler.cc:74] Next update check in 3m50s Jul 14 22:12:42.759402 systemd[1]: Started update-engine.service. Jul 14 22:12:42.761111 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 14 22:12:42.763750 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Jul 14 22:12:42.765775 systemd[1]: Started locksmithd.service. Jul 14 22:12:42.783067 extend-filesystems[1243]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 14 22:12:42.783067 extend-filesystems[1243]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 14 22:12:42.783067 extend-filesystems[1243]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Jul 14 22:12:42.788120 extend-filesystems[1195]: Resized filesystem in /dev/vda9 Jul 14 22:12:42.785394 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 14 22:12:42.785606 systemd[1]: Finished extend-filesystems.service. Jul 14 22:12:42.815095 env[1215]: time="2025-07-14T22:12:42.815036600Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 14 22:12:42.833431 env[1215]: time="2025-07-14T22:12:42.833376800Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 14 22:12:42.833713 env[1215]: time="2025-07-14T22:12:42.833684280Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 14 22:12:42.835997 env[1215]: time="2025-07-14T22:12:42.835950120Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.187-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 14 22:12:42.836087 env[1215]: time="2025-07-14T22:12:42.835994760Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 14 22:12:42.836476 env[1215]: time="2025-07-14T22:12:42.836441440Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 14 22:12:42.836476 env[1215]: time="2025-07-14T22:12:42.836474720Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 14 22:12:42.836540 env[1215]: time="2025-07-14T22:12:42.836491120Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 14 22:12:42.836540 env[1215]: time="2025-07-14T22:12:42.836502120Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 14 22:12:42.836771 env[1215]: time="2025-07-14T22:12:42.836653800Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 14 22:12:42.837361 env[1215]: time="2025-07-14T22:12:42.837212760Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 14 22:12:42.837499 env[1215]: time="2025-07-14T22:12:42.837469360Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 14 22:12:42.837579 env[1215]: time="2025-07-14T22:12:42.837555400Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 14 22:12:42.837735 env[1215]: time="2025-07-14T22:12:42.837631840Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 14 22:12:42.837735 env[1215]: time="2025-07-14T22:12:42.837647240Z" level=info msg="metadata content store policy set" policy=shared Jul 14 22:12:42.841515 env[1215]: time="2025-07-14T22:12:42.841469200Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 14 22:12:42.841610 env[1215]: time="2025-07-14T22:12:42.841565720Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 14 22:12:42.841610 env[1215]: time="2025-07-14T22:12:42.841585160Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 14 22:12:42.841656 env[1215]: time="2025-07-14T22:12:42.841624040Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 14 22:12:42.841656 env[1215]: time="2025-07-14T22:12:42.841643120Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 14 22:12:42.841695 env[1215]: time="2025-07-14T22:12:42.841659640Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 14 22:12:42.841695 env[1215]: time="2025-07-14T22:12:42.841672880Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 14 22:12:42.842267 env[1215]: time="2025-07-14T22:12:42.842228080Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 14 22:12:42.842299 env[1215]: time="2025-07-14T22:12:42.842283800Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 14 22:12:42.842389 env[1215]: time="2025-07-14T22:12:42.842303560Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 14 22:12:42.842417 env[1215]: time="2025-07-14T22:12:42.842393040Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 14 22:12:42.842417 env[1215]: time="2025-07-14T22:12:42.842409720Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 14 22:12:42.842625 env[1215]: time="2025-07-14T22:12:42.842541040Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 14 22:12:42.842716 env[1215]: time="2025-07-14T22:12:42.842696160Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 14 22:12:42.843079 env[1215]: time="2025-07-14T22:12:42.843054640Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 14 22:12:42.843108 env[1215]: time="2025-07-14T22:12:42.843095840Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 14 22:12:42.843130 env[1215]: time="2025-07-14T22:12:42.843111240Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 14 22:12:42.843485 env[1215]: time="2025-07-14T22:12:42.843460840Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 14 22:12:42.843517 env[1215]: time="2025-07-14T22:12:42.843490880Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 14 22:12:42.843517 env[1215]: time="2025-07-14T22:12:42.843506240Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 14 22:12:42.843566 env[1215]: time="2025-07-14T22:12:42.843518280Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 14 22:12:42.843566 env[1215]: time="2025-07-14T22:12:42.843532920Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 14 22:12:42.843566 env[1215]: time="2025-07-14T22:12:42.843545040Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 14 22:12:42.843627 env[1215]: time="2025-07-14T22:12:42.843613160Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 14 22:12:42.843648 env[1215]: time="2025-07-14T22:12:42.843631920Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 14 22:12:42.843675 env[1215]: time="2025-07-14T22:12:42.843652960Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 14 22:12:42.843893 env[1215]: time="2025-07-14T22:12:42.843866640Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 14 22:12:42.843923 env[1215]: time="2025-07-14T22:12:42.843900960Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 14 22:12:42.843923 env[1215]: time="2025-07-14T22:12:42.843916560Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 14 22:12:42.843974 env[1215]: time="2025-07-14T22:12:42.843928320Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 14 22:12:42.843974 env[1215]: time="2025-07-14T22:12:42.843944160Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 14 22:12:42.843974 env[1215]: time="2025-07-14T22:12:42.843955720Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 14 22:12:42.844032 env[1215]: time="2025-07-14T22:12:42.843974200Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 14 22:12:42.844081 env[1215]: time="2025-07-14T22:12:42.844010160Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 14 22:12:42.844457 env[1215]: time="2025-07-14T22:12:42.844355280Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 14 22:12:42.844457 env[1215]: time="2025-07-14T22:12:42.844427040Z" level=info msg="Connect containerd service" Jul 14 22:12:42.844457 env[1215]: time="2025-07-14T22:12:42.844460480Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 14 22:12:42.845579 env[1215]: time="2025-07-14T22:12:42.845421040Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 14 22:12:42.845990 env[1215]: time="2025-07-14T22:12:42.845965120Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 14 22:12:42.846135 env[1215]: time="2025-07-14T22:12:42.846019680Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 14 22:12:42.846135 env[1215]: time="2025-07-14T22:12:42.846066480Z" level=info msg="containerd successfully booted in 0.035263s" Jul 14 22:12:42.846154 systemd[1]: Started containerd.service. Jul 14 22:12:42.852843 env[1215]: time="2025-07-14T22:12:42.852787480Z" level=info msg="Start subscribing containerd event" Jul 14 22:12:42.852927 env[1215]: time="2025-07-14T22:12:42.852860120Z" level=info msg="Start recovering state" Jul 14 22:12:42.852951 env[1215]: time="2025-07-14T22:12:42.852939720Z" level=info msg="Start event monitor" Jul 14 22:12:42.852971 env[1215]: time="2025-07-14T22:12:42.852965480Z" level=info msg="Start snapshots syncer" Jul 14 22:12:42.853078 env[1215]: time="2025-07-14T22:12:42.852987720Z" level=info msg="Start cni network conf syncer for default" Jul 14 22:12:42.853122 env[1215]: time="2025-07-14T22:12:42.853081480Z" level=info msg="Start streaming server" Jul 14 22:12:42.865130 locksmithd[1246]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 14 22:12:43.103337 tar[1211]: linux-arm64/README.md Jul 14 22:12:43.108216 systemd[1]: Finished prepare-helm.service. Jul 14 22:12:43.464048 sshd_keygen[1216]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 14 22:12:43.484587 systemd[1]: Finished sshd-keygen.service. Jul 14 22:12:43.487198 systemd[1]: Starting issuegen.service... Jul 14 22:12:43.492340 systemd[1]: issuegen.service: Deactivated successfully. Jul 14 22:12:43.492518 systemd[1]: Finished issuegen.service. Jul 14 22:12:43.495029 systemd[1]: Starting systemd-user-sessions.service... Jul 14 22:12:43.503699 systemd[1]: Finished systemd-user-sessions.service. Jul 14 22:12:43.506559 systemd[1]: Started getty@tty1.service. Jul 14 22:12:43.509147 systemd[1]: Started serial-getty@ttyAMA0.service. Jul 14 22:12:43.510328 systemd[1]: Reached target getty.target. Jul 14 22:12:43.838192 systemd-networkd[1039]: eth0: Gained IPv6LL Jul 14 22:12:43.840065 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 14 22:12:43.841837 systemd[1]: Reached target network-online.target. Jul 14 22:12:43.844745 systemd[1]: Starting kubelet.service... Jul 14 22:12:44.512531 systemd[1]: Started kubelet.service. Jul 14 22:12:44.514599 systemd[1]: Reached target multi-user.target. Jul 14 22:12:44.517367 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 14 22:12:44.525567 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 14 22:12:44.525779 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 14 22:12:44.527022 systemd[1]: Startup finished in 591ms (kernel) + 45.724s (initrd) + 5.232s (userspace) = 51.547s. Jul 14 22:12:45.050757 kubelet[1274]: E0714 22:12:45.050697 1274 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 22:12:45.053076 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 22:12:45.053214 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 22:12:45.954939 systemd[1]: Created slice system-sshd.slice. Jul 14 22:12:45.956095 systemd[1]: Started sshd@0-10.0.0.132:22-10.0.0.1:52700.service. Jul 14 22:12:46.003534 sshd[1284]: Accepted publickey for core from 10.0.0.1 port 52700 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:12:46.005561 sshd[1284]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:12:46.013792 systemd[1]: Created slice user-500.slice. Jul 14 22:12:46.014988 systemd[1]: Starting user-runtime-dir@500.service... Jul 14 22:12:46.016823 systemd-logind[1204]: New session 1 of user core. Jul 14 22:12:46.024302 systemd[1]: Finished user-runtime-dir@500.service. Jul 14 22:12:46.025820 systemd[1]: Starting user@500.service... Jul 14 22:12:46.030801 (systemd)[1287]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:12:46.094313 systemd[1287]: Queued start job for default target default.target. Jul 14 22:12:46.094872 systemd[1287]: Reached target paths.target. Jul 14 22:12:46.094905 systemd[1287]: Reached target sockets.target. Jul 14 22:12:46.094917 systemd[1287]: Reached target timers.target. Jul 14 22:12:46.094927 systemd[1287]: Reached target basic.target. Jul 14 22:12:46.094967 systemd[1287]: Reached target default.target. Jul 14 22:12:46.094992 systemd[1287]: Startup finished in 57ms. Jul 14 22:12:46.095058 systemd[1]: Started user@500.service. Jul 14 22:12:46.096009 systemd[1]: Started session-1.scope. Jul 14 22:12:46.148965 systemd[1]: Started sshd@1-10.0.0.132:22-10.0.0.1:52702.service. Jul 14 22:12:46.192867 sshd[1296]: Accepted publickey for core from 10.0.0.1 port 52702 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:12:46.194521 sshd[1296]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:12:46.199420 systemd-logind[1204]: New session 2 of user core. Jul 14 22:12:46.200457 systemd[1]: Started session-2.scope. Jul 14 22:12:46.257637 sshd[1296]: pam_unix(sshd:session): session closed for user core Jul 14 22:12:46.260351 systemd[1]: sshd@1-10.0.0.132:22-10.0.0.1:52702.service: Deactivated successfully. Jul 14 22:12:46.261045 systemd[1]: session-2.scope: Deactivated successfully. Jul 14 22:12:46.261616 systemd-logind[1204]: Session 2 logged out. Waiting for processes to exit. Jul 14 22:12:46.262712 systemd[1]: Started sshd@2-10.0.0.132:22-10.0.0.1:52718.service. Jul 14 22:12:46.263349 systemd-logind[1204]: Removed session 2. Jul 14 22:12:46.297388 sshd[1302]: Accepted publickey for core from 10.0.0.1 port 52718 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:12:46.298605 sshd[1302]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:12:46.302183 systemd-logind[1204]: New session 3 of user core. Jul 14 22:12:46.303041 systemd[1]: Started session-3.scope. Jul 14 22:12:46.354012 sshd[1302]: pam_unix(sshd:session): session closed for user core Jul 14 22:12:46.357037 systemd[1]: sshd@2-10.0.0.132:22-10.0.0.1:52718.service: Deactivated successfully. Jul 14 22:12:46.357740 systemd[1]: session-3.scope: Deactivated successfully. Jul 14 22:12:46.358316 systemd-logind[1204]: Session 3 logged out. Waiting for processes to exit. Jul 14 22:12:46.359534 systemd[1]: Started sshd@3-10.0.0.132:22-10.0.0.1:52734.service. Jul 14 22:12:46.360305 systemd-logind[1204]: Removed session 3. Jul 14 22:12:46.394791 sshd[1308]: Accepted publickey for core from 10.0.0.1 port 52734 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:12:46.396165 sshd[1308]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:12:46.399871 systemd-logind[1204]: New session 4 of user core. Jul 14 22:12:46.400770 systemd[1]: Started session-4.scope. Jul 14 22:12:46.456812 sshd[1308]: pam_unix(sshd:session): session closed for user core Jul 14 22:12:46.460897 systemd[1]: Started sshd@4-10.0.0.132:22-10.0.0.1:52750.service. Jul 14 22:12:46.461407 systemd[1]: sshd@3-10.0.0.132:22-10.0.0.1:52734.service: Deactivated successfully. Jul 14 22:12:46.462150 systemd[1]: session-4.scope: Deactivated successfully. Jul 14 22:12:46.462661 systemd-logind[1204]: Session 4 logged out. Waiting for processes to exit. Jul 14 22:12:46.463517 systemd-logind[1204]: Removed session 4. Jul 14 22:12:46.496540 sshd[1313]: Accepted publickey for core from 10.0.0.1 port 52750 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:12:46.498427 sshd[1313]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:12:46.502235 systemd-logind[1204]: New session 5 of user core. Jul 14 22:12:46.503137 systemd[1]: Started session-5.scope. Jul 14 22:12:46.566817 sudo[1318]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 14 22:12:46.567046 sudo[1318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 14 22:12:46.581889 dbus-daemon[1193]: avc: received setenforce notice (enforcing=1) Jul 14 22:12:46.582828 sudo[1318]: pam_unix(sudo:session): session closed for user root Jul 14 22:12:46.585303 sshd[1313]: pam_unix(sshd:session): session closed for user core Jul 14 22:12:46.590222 systemd[1]: Started sshd@5-10.0.0.132:22-10.0.0.1:52758.service. Jul 14 22:12:46.590796 systemd[1]: sshd@4-10.0.0.132:22-10.0.0.1:52750.service: Deactivated successfully. Jul 14 22:12:46.591628 systemd[1]: session-5.scope: Deactivated successfully. Jul 14 22:12:46.592329 systemd-logind[1204]: Session 5 logged out. Waiting for processes to exit. Jul 14 22:12:46.593358 systemd-logind[1204]: Removed session 5. Jul 14 22:12:46.626384 sshd[1321]: Accepted publickey for core from 10.0.0.1 port 52758 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:12:46.627977 sshd[1321]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:12:46.631891 systemd-logind[1204]: New session 6 of user core. Jul 14 22:12:46.632364 systemd[1]: Started session-6.scope. Jul 14 22:12:46.686596 sudo[1326]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 14 22:12:46.686857 sudo[1326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 14 22:12:46.689512 sudo[1326]: pam_unix(sudo:session): session closed for user root Jul 14 22:12:46.694035 sudo[1325]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 14 22:12:46.694476 sudo[1325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 14 22:12:46.703197 systemd[1]: Stopping audit-rules.service... Jul 14 22:12:46.702000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 14 22:12:46.704442 auditctl[1329]: No rules Jul 14 22:12:46.704703 systemd[1]: audit-rules.service: Deactivated successfully. Jul 14 22:12:46.704869 systemd[1]: Stopped audit-rules.service. Jul 14 22:12:46.705053 kernel: kauditd_printk_skb: 172 callbacks suppressed Jul 14 22:12:46.705084 kernel: audit: type=1305 audit(1752531166.702:205): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 14 22:12:46.706331 systemd[1]: Starting audit-rules.service... Jul 14 22:12:46.702000 audit[1329]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd83dd2a0 a2=420 a3=0 items=0 ppid=1 pid=1329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:46.710412 kernel: audit: type=1300 audit(1752531166.702:205): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd83dd2a0 a2=420 a3=0 items=0 ppid=1 pid=1329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:46.710468 kernel: audit: type=1327 audit(1752531166.702:205): proctitle=2F7362696E2F617564697463746C002D44 Jul 14 22:12:46.702000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 14 22:12:46.711495 kernel: audit: type=1131 audit(1752531166.703:206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:46.703000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:46.723324 augenrules[1346]: No rules Jul 14 22:12:46.723935 systemd[1]: Finished audit-rules.service. Jul 14 22:12:46.723000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:46.725054 sudo[1325]: pam_unix(sudo:session): session closed for user root Jul 14 22:12:46.724000 audit[1325]: USER_END pid=1325 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:12:46.730009 kernel: audit: type=1130 audit(1752531166.723:207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:46.730052 kernel: audit: type=1106 audit(1752531166.724:208): pid=1325 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:12:46.730552 sshd[1321]: pam_unix(sshd:session): session closed for user core Jul 14 22:12:46.724000 audit[1325]: CRED_DISP pid=1325 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:12:46.733554 kernel: audit: type=1104 audit(1752531166.724:209): pid=1325 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:12:46.736108 kernel: audit: type=1106 audit(1752531166.733:210): pid=1321 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:46.733000 audit[1321]: USER_END pid=1321 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:46.735420 systemd[1]: Started sshd@6-10.0.0.132:22-10.0.0.1:52768.service. Jul 14 22:12:46.736242 systemd[1]: sshd@5-10.0.0.132:22-10.0.0.1:52758.service: Deactivated successfully. Jul 14 22:12:46.736883 systemd[1]: session-6.scope: Deactivated successfully. Jul 14 22:12:46.733000 audit[1321]: CRED_DISP pid=1321 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:46.742100 kernel: audit: type=1104 audit(1752531166.733:211): pid=1321 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:46.742147 kernel: audit: type=1130 audit(1752531166.733:212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.132:22-10.0.0.1:52768 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:46.733000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.132:22-10.0.0.1:52768 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:46.742255 systemd-logind[1204]: Session 6 logged out. Waiting for processes to exit. Jul 14 22:12:46.743303 systemd-logind[1204]: Removed session 6. Jul 14 22:12:46.733000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.132:22-10.0.0.1:52758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:46.769000 audit[1351]: USER_ACCT pid=1351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:46.770054 sshd[1351]: Accepted publickey for core from 10.0.0.1 port 52768 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:12:46.770000 audit[1351]: CRED_ACQ pid=1351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:46.770000 audit[1351]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd8331e90 a2=3 a3=1 items=0 ppid=1 pid=1351 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:46.770000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:12:46.771230 sshd[1351]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:12:46.774953 systemd-logind[1204]: New session 7 of user core. Jul 14 22:12:46.775174 systemd[1]: Started session-7.scope. Jul 14 22:12:46.776000 audit[1351]: USER_START pid=1351 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:46.777000 audit[1354]: CRED_ACQ pid=1354 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:12:46.826000 audit[1355]: USER_ACCT pid=1355 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:12:46.827000 audit[1355]: CRED_REFR pid=1355 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:12:46.827791 sudo[1355]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 14 22:12:46.829200 sudo[1355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 14 22:12:46.830000 audit[1355]: USER_START pid=1355 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:12:46.886253 systemd[1]: Starting docker.service... Jul 14 22:12:46.973702 env[1368]: time="2025-07-14T22:12:46.973645936Z" level=info msg="Starting up" Jul 14 22:12:46.975608 env[1368]: time="2025-07-14T22:12:46.975579642Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 14 22:12:46.975608 env[1368]: time="2025-07-14T22:12:46.975605027Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 14 22:12:46.975697 env[1368]: time="2025-07-14T22:12:46.975630618Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 14 22:12:46.975697 env[1368]: time="2025-07-14T22:12:46.975641996Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 14 22:12:46.977883 env[1368]: time="2025-07-14T22:12:46.977850625Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 14 22:12:46.977883 env[1368]: time="2025-07-14T22:12:46.977877365Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 14 22:12:46.977995 env[1368]: time="2025-07-14T22:12:46.977892974Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 14 22:12:46.977995 env[1368]: time="2025-07-14T22:12:46.977902052Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 14 22:12:47.275998 env[1368]: time="2025-07-14T22:12:47.275956684Z" level=info msg="Loading containers: start." Jul 14 22:12:47.328000 audit[1403]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1403 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:12:47.328000 audit[1403]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffda5d9110 a2=0 a3=1 items=0 ppid=1368 pid=1403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:47.328000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 14 22:12:47.330000 audit[1405]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1405 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:12:47.330000 audit[1405]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffe4915c00 a2=0 a3=1 items=0 ppid=1368 pid=1405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:47.330000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 14 22:12:47.332000 audit[1407]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1407 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:12:47.332000 audit[1407]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffdfaba1c0 a2=0 a3=1 items=0 ppid=1368 pid=1407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:47.332000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 14 22:12:47.333000 audit[1409]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1409 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:12:47.333000 audit[1409]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffe7752b90 a2=0 a3=1 items=0 ppid=1368 pid=1409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:47.333000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 14 22:12:47.337000 audit[1411]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1411 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:12:47.337000 audit[1411]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffec176e60 a2=0 a3=1 items=0 ppid=1368 pid=1411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:47.337000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 14 22:12:47.368000 audit[1416]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1416 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:12:47.368000 audit[1416]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff56be5c0 a2=0 a3=1 items=0 ppid=1368 pid=1416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:47.368000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 14 22:12:47.376000 audit[1418]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1418 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:12:47.376000 audit[1418]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd43ca9b0 a2=0 a3=1 items=0 ppid=1368 pid=1418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:47.376000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 14 22:12:47.378000 audit[1420]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1420 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:12:47.378000 audit[1420]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffe399ddd0 a2=0 a3=1 items=0 ppid=1368 pid=1420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:47.378000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 14 22:12:47.379000 audit[1422]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1422 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:12:47.379000 audit[1422]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffe8c7de50 a2=0 a3=1 items=0 ppid=1368 pid=1422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:47.379000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 14 22:12:47.388000 audit[1426]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1426 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:12:47.388000 audit[1426]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffc12f15a0 a2=0 a3=1 items=0 ppid=1368 pid=1426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:47.388000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 14 22:12:47.400000 audit[1427]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1427 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:12:47.400000 audit[1427]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffcbd4a710 a2=0 a3=1 items=0 ppid=1368 pid=1427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:47.400000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 14 22:12:47.411770 kernel: Initializing XFRM netlink socket Jul 14 22:12:47.436086 env[1368]: time="2025-07-14T22:12:47.436041428Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 14 22:12:47.450000 audit[1435]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1435 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:12:47.450000 audit[1435]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffcc289750 a2=0 a3=1 items=0 ppid=1368 pid=1435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:47.450000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 14 22:12:47.468000 audit[1438]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1438 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:12:47.468000 audit[1438]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffedd975f0 a2=0 a3=1 items=0 ppid=1368 pid=1438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:47.468000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 14 22:12:47.471000 audit[1441]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1441 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:12:47.471000 audit[1441]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffdb4d5a10 a2=0 a3=1 items=0 ppid=1368 pid=1441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:47.471000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 14 22:12:47.473000 audit[1443]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1443 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:12:47.473000 audit[1443]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffff0a92430 a2=0 a3=1 items=0 ppid=1368 pid=1443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:47.473000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 14 22:12:47.475000 audit[1445]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1445 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:12:47.475000 audit[1445]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=fffff42d8b00 a2=0 a3=1 items=0 ppid=1368 pid=1445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:47.475000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 14 22:12:47.477000 audit[1447]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1447 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:12:47.477000 audit[1447]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=fffff4df6230 a2=0 a3=1 items=0 ppid=1368 pid=1447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:47.477000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 14 22:12:47.479000 audit[1449]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1449 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:12:47.479000 audit[1449]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffee7fb950 a2=0 a3=1 items=0 ppid=1368 pid=1449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:47.479000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 14 22:12:47.485000 audit[1452]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1452 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:12:47.485000 audit[1452]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffddf71480 a2=0 a3=1 items=0 ppid=1368 pid=1452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:47.485000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 14 22:12:47.487000 audit[1454]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1454 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:12:47.487000 audit[1454]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffd39426a0 a2=0 a3=1 items=0 ppid=1368 pid=1454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:47.487000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 14 22:12:47.489000 audit[1456]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1456 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:12:47.489000 audit[1456]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffd03b86d0 a2=0 a3=1 items=0 ppid=1368 pid=1456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:47.489000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 14 22:12:47.492000 audit[1458]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1458 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:12:47.492000 audit[1458]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffeec706d0 a2=0 a3=1 items=0 ppid=1368 pid=1458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:47.492000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 14 22:12:47.494706 systemd-networkd[1039]: docker0: Link UP Jul 14 22:12:47.503000 audit[1462]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1462 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:12:47.503000 audit[1462]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff7590720 a2=0 a3=1 items=0 ppid=1368 pid=1462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:47.503000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 14 22:12:47.520000 audit[1463]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1463 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:12:47.520000 audit[1463]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd49f5c20 a2=0 a3=1 items=0 ppid=1368 pid=1463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:12:47.520000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 14 22:12:47.521284 env[1368]: time="2025-07-14T22:12:47.521235620Z" level=info msg="Loading containers: done." Jul 14 22:12:47.549713 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3279794888-merged.mount: Deactivated successfully. Jul 14 22:12:47.561010 env[1368]: time="2025-07-14T22:12:47.560958095Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 14 22:12:47.561201 env[1368]: time="2025-07-14T22:12:47.561171565Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 14 22:12:47.561331 env[1368]: time="2025-07-14T22:12:47.561295742Z" level=info msg="Daemon has completed initialization" Jul 14 22:12:47.581079 systemd[1]: Started docker.service. Jul 14 22:12:47.579000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:47.588557 env[1368]: time="2025-07-14T22:12:47.588432937Z" level=info msg="API listen on /run/docker.sock" Jul 14 22:12:55.251572 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 14 22:12:55.251000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:55.251768 systemd[1]: Stopped kubelet.service. Jul 14 22:12:55.253143 systemd[1]: Starting kubelet.service... Jul 14 22:12:55.254798 kernel: kauditd_printk_skb: 84 callbacks suppressed Jul 14 22:12:55.254872 kernel: audit: type=1130 audit(1752531175.251:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:55.254898 kernel: audit: type=1131 audit(1752531175.251:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:55.251000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:55.357000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:55.357854 systemd[1]: Started kubelet.service. Jul 14 22:12:55.360749 kernel: audit: type=1130 audit(1752531175.357:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:12:55.398746 kubelet[1502]: E0714 22:12:55.398689 1502 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 22:12:55.401237 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 22:12:55.401367 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 22:12:55.400000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 22:12:55.404770 kernel: audit: type=1131 audit(1752531175.400:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 22:12:58.007339 env[1215]: time="2025-07-14T22:12:58.006998453Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.0\"" Jul 14 22:13:05.490000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:13:05.491552 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 14 22:13:05.491752 systemd[1]: Stopped kubelet.service. Jul 14 22:13:05.493218 systemd[1]: Starting kubelet.service... Jul 14 22:13:05.490000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:13:05.499869 kernel: audit: type=1130 audit(1752531185.490:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:13:05.499936 kernel: audit: type=1131 audit(1752531185.490:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:13:05.592000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:13:05.592791 systemd[1]: Started kubelet.service. Jul 14 22:13:05.596769 kernel: audit: type=1130 audit(1752531185.592:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:13:05.625328 kubelet[1516]: E0714 22:13:05.625267 1516 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 22:13:05.627000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 22:13:05.627840 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 22:13:05.627959 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 22:13:05.630755 kernel: audit: type=1131 audit(1752531185.627:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 22:13:09.182139 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1170807612.mount: Deactivated successfully. Jul 14 22:13:10.963174 env[1215]: time="2025-07-14T22:13:10.963122697Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:10.964372 env[1215]: time="2025-07-14T22:13:10.964340865Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:61f3acc54bb6287bd70730049e1802307720455b825c274cc0aa86f3d71af276,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:10.966247 env[1215]: time="2025-07-14T22:13:10.966208822Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:10.968057 env[1215]: time="2025-07-14T22:13:10.968011147Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6679a9970a8b2f18647b33bf02e5e9895d286689256e2f7172481b4096e46a32,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:10.968857 env[1215]: time="2025-07-14T22:13:10.968821110Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.0\" returns image reference \"sha256:61f3acc54bb6287bd70730049e1802307720455b825c274cc0aa86f3d71af276\"" Jul 14 22:13:10.972382 env[1215]: time="2025-07-14T22:13:10.972330577Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.0\"" Jul 14 22:13:12.690892 env[1215]: time="2025-07-14T22:13:12.690840711Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:12.692675 env[1215]: time="2025-07-14T22:13:12.692643577Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5372350fd0a1ee141f2e4f0df503109a252a88db308d8f965d06b4960d1b0f49,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:12.693495 env[1215]: time="2025-07-14T22:13:12.693460979Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.0\" returns image reference \"sha256:5372350fd0a1ee141f2e4f0df503109a252a88db308d8f965d06b4960d1b0f49\"" Jul 14 22:13:12.694237 env[1215]: time="2025-07-14T22:13:12.694207443Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.0\"" Jul 14 22:13:12.695275 env[1215]: time="2025-07-14T22:13:12.695250554Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:12.696432 env[1215]: time="2025-07-14T22:13:12.696404157Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:f0b32ab11fd06504608cdb9084f7284106b4f5f07f35eb8823e70ea0eaaf252a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:14.049212 env[1215]: time="2025-07-14T22:13:14.049156712Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:14.051435 env[1215]: time="2025-07-14T22:13:14.051364203Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f8984990ac26bde333700dad6270d0e7e4bd1cd2fb5b48d82c0329a83e4e252c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:14.053696 env[1215]: time="2025-07-14T22:13:14.053655308Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:14.055645 env[1215]: time="2025-07-14T22:13:14.055608357Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:8dd2fbeb7f711da53a89ded239e54133f34110d98de887a39a9021e651b51f1f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:14.056387 env[1215]: time="2025-07-14T22:13:14.056353754Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.0\" returns image reference \"sha256:f8984990ac26bde333700dad6270d0e7e4bd1cd2fb5b48d82c0329a83e4e252c\"" Jul 14 22:13:14.057011 env[1215]: time="2025-07-14T22:13:14.056986318Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.0\"" Jul 14 22:13:15.197376 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3645672219.mount: Deactivated successfully. Jul 14 22:13:15.715366 env[1215]: time="2025-07-14T22:13:15.715294956Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:15.717399 env[1215]: time="2025-07-14T22:13:15.717354521Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8d27a60846a202a0f67dcac3333c24f9ff809f574a261b273945e9e05706518d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:15.718962 env[1215]: time="2025-07-14T22:13:15.718933991Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:15.720158 env[1215]: time="2025-07-14T22:13:15.720120996Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:05f8984642d05b1b1a6c37605a4a566e46e7290f9291d17885f096c36861095b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:15.720624 env[1215]: time="2025-07-14T22:13:15.720601291Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.0\" returns image reference \"sha256:8d27a60846a202a0f67dcac3333c24f9ff809f574a261b273945e9e05706518d\"" Jul 14 22:13:15.721113 env[1215]: time="2025-07-14T22:13:15.721033427Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" Jul 14 22:13:15.740438 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Jul 14 22:13:15.739000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:13:15.740601 systemd[1]: Stopped kubelet.service. Jul 14 22:13:15.741991 systemd[1]: Starting kubelet.service... Jul 14 22:13:15.739000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:13:15.745762 kernel: audit: type=1130 audit(1752531195.739:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:13:15.745838 kernel: audit: type=1131 audit(1752531195.739:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:13:15.839042 systemd[1]: Started kubelet.service. Jul 14 22:13:15.838000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:13:15.842746 kernel: audit: type=1130 audit(1752531195.838:257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:13:15.873107 kubelet[1528]: E0714 22:13:15.873057 1528 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 22:13:15.877103 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 22:13:15.876000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 22:13:15.877237 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 22:13:15.880778 kernel: audit: type=1131 audit(1752531195.876:258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 22:13:16.300432 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4106649717.mount: Deactivated successfully. Jul 14 22:13:17.332640 env[1215]: time="2025-07-14T22:13:17.332592500Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:17.334165 env[1215]: time="2025-07-14T22:13:17.334141818Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f72407be9e08c3a1b29a88318cbfee87b9f2da489f84015a5090b1e386e4dbc1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:17.336476 env[1215]: time="2025-07-14T22:13:17.336438134Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:17.338177 env[1215]: time="2025-07-14T22:13:17.338147883Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:17.339113 env[1215]: time="2025-07-14T22:13:17.339083374Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:f72407be9e08c3a1b29a88318cbfee87b9f2da489f84015a5090b1e386e4dbc1\"" Jul 14 22:13:17.339615 env[1215]: time="2025-07-14T22:13:17.339590166Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 14 22:13:17.777320 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2828210505.mount: Deactivated successfully. Jul 14 22:13:17.782291 env[1215]: time="2025-07-14T22:13:17.782255354Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:17.783737 env[1215]: time="2025-07-14T22:13:17.783687830Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:17.785114 env[1215]: time="2025-07-14T22:13:17.785089885Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:17.786409 env[1215]: time="2025-07-14T22:13:17.786375899Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:17.786957 env[1215]: time="2025-07-14T22:13:17.786929204Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Jul 14 22:13:17.787357 env[1215]: time="2025-07-14T22:13:17.787334966Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" Jul 14 22:13:20.239896 env[1215]: time="2025-07-14T22:13:20.239840042Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:20.244329 env[1215]: time="2025-07-14T22:13:20.244287658Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:31747a36ce712f0bf61b50a0c06e99768522025e7b8daedd6dc63d1ae84837b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:20.247838 env[1215]: time="2025-07-14T22:13:20.247796843Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:20.250033 env[1215]: time="2025-07-14T22:13:20.250002900Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:20.250910 env[1215]: time="2025-07-14T22:13:20.250880577Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:31747a36ce712f0bf61b50a0c06e99768522025e7b8daedd6dc63d1ae84837b5\"" Jul 14 22:13:25.990484 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Jul 14 22:13:25.989000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:13:25.990655 systemd[1]: Stopped kubelet.service. Jul 14 22:13:25.992116 systemd[1]: Starting kubelet.service... Jul 14 22:13:25.989000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:13:25.999575 kernel: audit: type=1130 audit(1752531205.989:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:13:25.999651 kernel: audit: type=1131 audit(1752531205.989:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:13:26.088638 systemd[1]: Started kubelet.service. Jul 14 22:13:26.087000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:13:26.095754 kernel: audit: type=1130 audit(1752531206.087:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:13:26.122074 kubelet[1545]: E0714 22:13:26.122027 1545 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 22:13:26.123986 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 22:13:26.124112 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 22:13:26.122000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 22:13:26.127761 kernel: audit: type=1131 audit(1752531206.122:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 22:13:28.021020 update_engine[1207]: I0714 22:13:28.020752 1207 update_attempter.cc:509] Updating boot flags... Jul 14 22:13:36.162127 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 5. Jul 14 22:13:36.162330 systemd[1]: Stopped kubelet.service. Jul 14 22:13:36.161000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:13:36.163717 systemd[1]: Starting kubelet.service... Jul 14 22:13:36.161000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:13:36.167764 kernel: audit: type=1130 audit(1752531216.161:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:13:36.167843 kernel: audit: type=1131 audit(1752531216.161:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:13:36.173612 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Jul 14 22:13:36.173674 systemd[1]: kubelet.service: Failed with result 'signal'. Jul 14 22:13:36.173874 systemd[1]: Stopped kubelet.service. Jul 14 22:13:36.173000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 22:13:36.175897 systemd[1]: Starting kubelet.service... Jul 14 22:13:36.177756 kernel: audit: type=1130 audit(1752531216.173:265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 22:13:36.197718 systemd[1]: Reloading. Jul 14 22:13:36.256964 /usr/lib/systemd/system-generators/torcx-generator[1615]: time="2025-07-14T22:13:36Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.101 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.101 /var/lib/torcx/store]" Jul 14 22:13:36.256996 /usr/lib/systemd/system-generators/torcx-generator[1615]: time="2025-07-14T22:13:36Z" level=info msg="torcx already run" Jul 14 22:13:36.368005 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 14 22:13:36.368022 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 14 22:13:36.383351 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 14 22:13:36.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.439709 kernel: audit: type=1400 audit(1752531216.433:266): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.439764 kernel: audit: type=1400 audit(1752531216.433:267): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.439786 kernel: audit: type=1400 audit(1752531216.433:268): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.444654 kernel: audit: type=1400 audit(1752531216.433:269): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.444695 kernel: audit: type=1400 audit(1752531216.433:270): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.449668 kernel: audit: type=1400 audit(1752531216.433:271): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.449701 kernel: audit: type=1400 audit(1752531216.433:272): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.436000 audit: BPF prog-id=46 op=LOAD Jul 14 22:13:36.436000 audit: BPF prog-id=39 op=UNLOAD Jul 14 22:13:36.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.439000 audit: BPF prog-id=47 op=LOAD Jul 14 22:13:36.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.441000 audit: BPF prog-id=48 op=LOAD Jul 14 22:13:36.441000 audit: BPF prog-id=30 op=UNLOAD Jul 14 22:13:36.441000 audit: BPF prog-id=31 op=UNLOAD Jul 14 22:13:36.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.444000 audit: BPF prog-id=49 op=LOAD Jul 14 22:13:36.444000 audit: BPF prog-id=40 op=UNLOAD Jul 14 22:13:36.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.446000 audit: BPF prog-id=50 op=LOAD Jul 14 22:13:36.446000 audit: BPF prog-id=44 op=UNLOAD Jul 14 22:13:36.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.449000 audit: BPF prog-id=51 op=LOAD Jul 14 22:13:36.449000 audit: BPF prog-id=32 op=UNLOAD Jul 14 22:13:36.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.451000 audit: BPF prog-id=53 op=LOAD Jul 14 22:13:36.451000 audit: BPF prog-id=33 op=UNLOAD Jul 14 22:13:36.451000 audit: BPF prog-id=34 op=UNLOAD Jul 14 22:13:36.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.453000 audit: BPF prog-id=54 op=LOAD Jul 14 22:13:36.453000 audit: BPF prog-id=35 op=UNLOAD Jul 14 22:13:36.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.453000 audit: BPF prog-id=55 op=LOAD Jul 14 22:13:36.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.453000 audit: BPF prog-id=56 op=LOAD Jul 14 22:13:36.453000 audit: BPF prog-id=36 op=UNLOAD Jul 14 22:13:36.453000 audit: BPF prog-id=37 op=UNLOAD Jul 14 22:13:36.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.455000 audit: BPF prog-id=57 op=LOAD Jul 14 22:13:36.455000 audit: BPF prog-id=38 op=UNLOAD Jul 14 22:13:36.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.455000 audit: BPF prog-id=58 op=LOAD Jul 14 22:13:36.455000 audit: BPF prog-id=41 op=UNLOAD Jul 14 22:13:36.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.456000 audit: BPF prog-id=59 op=LOAD Jul 14 22:13:36.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:36.456000 audit: BPF prog-id=60 op=LOAD Jul 14 22:13:36.456000 audit: BPF prog-id=42 op=UNLOAD Jul 14 22:13:36.456000 audit: BPF prog-id=43 op=UNLOAD Jul 14 22:13:36.466908 systemd[1]: Started kubelet.service. Jul 14 22:13:36.466000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:13:36.468517 systemd[1]: Stopping kubelet.service... Jul 14 22:13:36.468911 systemd[1]: kubelet.service: Deactivated successfully. Jul 14 22:13:36.469082 systemd[1]: Stopped kubelet.service. Jul 14 22:13:36.468000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:13:36.470535 systemd[1]: Starting kubelet.service... Jul 14 22:13:36.568316 systemd[1]: Started kubelet.service. Jul 14 22:13:36.568000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:13:36.605600 kubelet[1658]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 14 22:13:36.605600 kubelet[1658]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 14 22:13:36.605600 kubelet[1658]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 14 22:13:36.605976 kubelet[1658]: I0714 22:13:36.605707 1658 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 14 22:13:37.705422 kubelet[1658]: I0714 22:13:37.705378 1658 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Jul 14 22:13:37.705422 kubelet[1658]: I0714 22:13:37.705409 1658 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 14 22:13:37.705793 kubelet[1658]: I0714 22:13:37.705657 1658 server.go:956] "Client rotation is on, will bootstrap in background" Jul 14 22:13:37.828901 kubelet[1658]: E0714 22:13:37.828853 1658 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://10.0.0.132:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.132:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Jul 14 22:13:37.829801 kubelet[1658]: I0714 22:13:37.829773 1658 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 14 22:13:37.837095 kubelet[1658]: E0714 22:13:37.837051 1658 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 14 22:13:37.837238 kubelet[1658]: I0714 22:13:37.837221 1658 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 14 22:13:37.840224 kubelet[1658]: I0714 22:13:37.840196 1658 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 14 22:13:37.841549 kubelet[1658]: I0714 22:13:37.841512 1658 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 14 22:13:37.841822 kubelet[1658]: I0714 22:13:37.841627 1658 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 14 22:13:37.842098 kubelet[1658]: I0714 22:13:37.842078 1658 topology_manager.go:138] "Creating topology manager with none policy" Jul 14 22:13:37.842170 kubelet[1658]: I0714 22:13:37.842160 1658 container_manager_linux.go:303] "Creating device plugin manager" Jul 14 22:13:37.842461 kubelet[1658]: I0714 22:13:37.842445 1658 state_mem.go:36] "Initialized new in-memory state store" Jul 14 22:13:37.849279 kubelet[1658]: I0714 22:13:37.849258 1658 kubelet.go:480] "Attempting to sync node with API server" Jul 14 22:13:37.849396 kubelet[1658]: I0714 22:13:37.849365 1658 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 14 22:13:37.849508 kubelet[1658]: I0714 22:13:37.849497 1658 kubelet.go:386] "Adding apiserver pod source" Jul 14 22:13:37.853813 kubelet[1658]: I0714 22:13:37.853775 1658 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 14 22:13:37.855537 kubelet[1658]: I0714 22:13:37.855513 1658 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 14 22:13:37.856704 kubelet[1658]: E0714 22:13:37.856665 1658 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.0.0.132:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.132:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Jul 14 22:13:37.856992 kubelet[1658]: E0714 22:13:37.856954 1658 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.0.0.132:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.132:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Jul 14 22:13:37.858684 kubelet[1658]: I0714 22:13:37.858655 1658 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Jul 14 22:13:37.858904 kubelet[1658]: W0714 22:13:37.858892 1658 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 14 22:13:37.864413 kubelet[1658]: I0714 22:13:37.864374 1658 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 14 22:13:37.864485 kubelet[1658]: I0714 22:13:37.864474 1658 server.go:1289] "Started kubelet" Jul 14 22:13:37.864575 kubelet[1658]: I0714 22:13:37.864545 1658 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Jul 14 22:13:37.865872 kubelet[1658]: I0714 22:13:37.865815 1658 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 14 22:13:37.866207 kubelet[1658]: I0714 22:13:37.866179 1658 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 14 22:13:37.864000 audit[1658]: AVC avc: denied { mac_admin } for pid=1658 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:37.864000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 22:13:37.864000 audit[1658]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40006ed920 a1=4000bf6c30 a2=40006ed8f0 a3=25 items=0 ppid=1 pid=1658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:37.864000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 22:13:37.866845 kubelet[1658]: I0714 22:13:37.866492 1658 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 14 22:13:37.865000 audit[1658]: AVC avc: denied { mac_admin } for pid=1658 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:37.865000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 22:13:37.865000 audit[1658]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000c4e240 a1=4000bf6c48 a2=40006ed9b0 a3=25 items=0 ppid=1 pid=1658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:37.865000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 22:13:37.867288 kubelet[1658]: I0714 22:13:37.867270 1658 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 14 22:13:37.867434 kubelet[1658]: I0714 22:13:37.867420 1658 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 14 22:13:37.868072 kubelet[1658]: I0714 22:13:37.868043 1658 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 14 22:13:37.869021 kubelet[1658]: I0714 22:13:37.868990 1658 server.go:317] "Adding debug handlers to kubelet server" Jul 14 22:13:37.869982 kubelet[1658]: I0714 22:13:37.869963 1658 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 14 22:13:37.874247 kubelet[1658]: I0714 22:13:37.874216 1658 factory.go:223] Registration of the systemd container factory successfully Jul 14 22:13:37.874306 kubelet[1658]: I0714 22:13:37.874296 1658 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 14 22:13:37.874491 kubelet[1658]: I0714 22:13:37.874465 1658 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 14 22:13:37.874549 kubelet[1658]: I0714 22:13:37.874535 1658 reconciler.go:26] "Reconciler: start to sync state" Jul 14 22:13:37.875028 kubelet[1658]: E0714 22:13:37.875001 1658 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 22:13:37.875636 kubelet[1658]: E0714 22:13:37.875610 1658 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.0.0.132:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.132:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Jul 14 22:13:37.875712 kubelet[1658]: E0714 22:13:37.875683 1658 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.132:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.132:6443: connect: connection refused" interval="200ms" Jul 14 22:13:37.876566 kubelet[1658]: I0714 22:13:37.876390 1658 factory.go:223] Registration of the containerd container factory successfully Jul 14 22:13:37.877506 kubelet[1658]: E0714 22:13:37.877487 1658 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 14 22:13:37.878782 kubelet[1658]: E0714 22:13:37.877762 1658 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.132:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.132:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.18523ddb7a9705bb default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-14 22:13:37.864394171 +0000 UTC m=+1.291616732,LastTimestamp:2025-07-14 22:13:37.864394171 +0000 UTC m=+1.291616732,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 14 22:13:37.879000 audit[1678]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1678 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:37.879000 audit[1678]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffdf788550 a2=0 a3=1 items=0 ppid=1658 pid=1678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:37.879000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 14 22:13:37.881000 audit[1679]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1679 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:37.881000 audit[1679]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffed2c9d0 a2=0 a3=1 items=0 ppid=1658 pid=1679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:37.881000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 14 22:13:37.883000 audit[1682]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1682 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:37.883000 audit[1682]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffea274860 a2=0 a3=1 items=0 ppid=1658 pid=1682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:37.883000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 14 22:13:37.886789 kubelet[1658]: I0714 22:13:37.886692 1658 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 14 22:13:37.886789 kubelet[1658]: I0714 22:13:37.886744 1658 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 14 22:13:37.886789 kubelet[1658]: I0714 22:13:37.886763 1658 state_mem.go:36] "Initialized new in-memory state store" Jul 14 22:13:37.886000 audit[1685]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1685 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:37.886000 audit[1685]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffecb0f0d0 a2=0 a3=1 items=0 ppid=1658 pid=1685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:37.886000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 14 22:13:37.888457 kubelet[1658]: I0714 22:13:37.888425 1658 policy_none.go:49] "None policy: Start" Jul 14 22:13:37.888457 kubelet[1658]: I0714 22:13:37.888451 1658 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 14 22:13:37.888510 kubelet[1658]: I0714 22:13:37.888463 1658 state_mem.go:35] "Initializing new in-memory state store" Jul 14 22:13:37.894184 systemd[1]: Created slice kubepods.slice. Jul 14 22:13:37.895393 kubelet[1658]: I0714 22:13:37.895358 1658 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Jul 14 22:13:37.892000 audit[1688]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1688 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:37.892000 audit[1688]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffea4c1e50 a2=0 a3=1 items=0 ppid=1658 pid=1688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:37.892000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 14 22:13:37.894000 audit[1690]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1690 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:13:37.894000 audit[1690]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffeaf30320 a2=0 a3=1 items=0 ppid=1658 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:37.894000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 14 22:13:37.896494 kubelet[1658]: I0714 22:13:37.896468 1658 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Jul 14 22:13:37.896494 kubelet[1658]: I0714 22:13:37.896490 1658 status_manager.go:230] "Starting to sync pod status with apiserver" Jul 14 22:13:37.896553 kubelet[1658]: I0714 22:13:37.896523 1658 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 14 22:13:37.896553 kubelet[1658]: I0714 22:13:37.896532 1658 kubelet.go:2436] "Starting kubelet main sync loop" Jul 14 22:13:37.896593 kubelet[1658]: E0714 22:13:37.896570 1658 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 14 22:13:37.897209 kubelet[1658]: E0714 22:13:37.897180 1658 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.0.0.132:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.132:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Jul 14 22:13:37.895000 audit[1691]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1691 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:37.895000 audit[1691]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcacb6bc0 a2=0 a3=1 items=0 ppid=1658 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:37.895000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 14 22:13:37.896000 audit[1692]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1692 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:13:37.896000 audit[1692]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd9d3fb90 a2=0 a3=1 items=0 ppid=1658 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:37.896000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 14 22:13:37.897000 audit[1693]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1693 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:37.897000 audit[1693]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe81347e0 a2=0 a3=1 items=0 ppid=1658 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:37.897000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 14 22:13:37.897000 audit[1695]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_chain pid=1695 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:37.897000 audit[1695]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe123f6b0 a2=0 a3=1 items=0 ppid=1658 pid=1695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:37.897000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 14 22:13:37.899905 systemd[1]: Created slice kubepods-burstable.slice. Jul 14 22:13:37.899000 audit[1694]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1694 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:13:37.899000 audit[1694]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=fffff3365ec0 a2=0 a3=1 items=0 ppid=1658 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:37.899000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 14 22:13:37.900000 audit[1696]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1696 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:13:37.900000 audit[1696]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffffaba37a0 a2=0 a3=1 items=0 ppid=1658 pid=1696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:37.900000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 14 22:13:37.903192 systemd[1]: Created slice kubepods-besteffort.slice. Jul 14 22:13:37.921507 kubelet[1658]: E0714 22:13:37.921480 1658 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Jul 14 22:13:37.920000 audit[1658]: AVC avc: denied { mac_admin } for pid=1658 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:37.920000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 22:13:37.920000 audit[1658]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d7c060 a1=4000b63fb0 a2=4000d7c030 a3=25 items=0 ppid=1 pid=1658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:37.920000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 22:13:37.922357 kubelet[1658]: E0714 22:13:37.922328 1658 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Jul 14 22:13:37.922715 kubelet[1658]: I0714 22:13:37.922696 1658 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 14 22:13:37.922877 kubelet[1658]: I0714 22:13:37.922841 1658 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 14 22:13:37.923328 kubelet[1658]: I0714 22:13:37.923313 1658 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 14 22:13:37.923744 kubelet[1658]: E0714 22:13:37.923709 1658 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 14 22:13:37.923807 kubelet[1658]: E0714 22:13:37.923755 1658 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 14 22:13:38.005426 systemd[1]: Created slice kubepods-burstable-pod7883c2a360afc5b3c9b064549b9b0c8d.slice. Jul 14 22:13:38.020410 kubelet[1658]: E0714 22:13:38.020370 1658 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 22:13:38.022323 systemd[1]: Created slice kubepods-burstable-podfad475d3be2e7026903cdccc200d075f.slice. Jul 14 22:13:38.025601 kubelet[1658]: I0714 22:13:38.025569 1658 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 14 22:13:38.026020 kubelet[1658]: E0714 22:13:38.025998 1658 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.132:6443/api/v1/nodes\": dial tcp 10.0.0.132:6443: connect: connection refused" node="localhost" Jul 14 22:13:38.037879 kubelet[1658]: E0714 22:13:38.037828 1658 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 22:13:38.040260 systemd[1]: Created slice kubepods-burstable-pod9d3b278dc477394b246ea515bd0e21d9.slice. Jul 14 22:13:38.041701 kubelet[1658]: E0714 22:13:38.041658 1658 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 22:13:38.076406 kubelet[1658]: E0714 22:13:38.076360 1658 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.132:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.132:6443: connect: connection refused" interval="400ms" Jul 14 22:13:38.175654 kubelet[1658]: I0714 22:13:38.175612 1658 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/9d3b278dc477394b246ea515bd0e21d9-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"9d3b278dc477394b246ea515bd0e21d9\") " pod="kube-system/kube-apiserver-localhost" Jul 14 22:13:38.175654 kubelet[1658]: I0714 22:13:38.175651 1658 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/9d3b278dc477394b246ea515bd0e21d9-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"9d3b278dc477394b246ea515bd0e21d9\") " pod="kube-system/kube-apiserver-localhost" Jul 14 22:13:38.175817 kubelet[1658]: I0714 22:13:38.175669 1658 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/7883c2a360afc5b3c9b064549b9b0c8d-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"7883c2a360afc5b3c9b064549b9b0c8d\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:13:38.175817 kubelet[1658]: I0714 22:13:38.175689 1658 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/7883c2a360afc5b3c9b064549b9b0c8d-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"7883c2a360afc5b3c9b064549b9b0c8d\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:13:38.175817 kubelet[1658]: I0714 22:13:38.175705 1658 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/7883c2a360afc5b3c9b064549b9b0c8d-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"7883c2a360afc5b3c9b064549b9b0c8d\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:13:38.175817 kubelet[1658]: I0714 22:13:38.175734 1658 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/7883c2a360afc5b3c9b064549b9b0c8d-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"7883c2a360afc5b3c9b064549b9b0c8d\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:13:38.175817 kubelet[1658]: I0714 22:13:38.175754 1658 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/7883c2a360afc5b3c9b064549b9b0c8d-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"7883c2a360afc5b3c9b064549b9b0c8d\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:13:38.175927 kubelet[1658]: I0714 22:13:38.175772 1658 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/9d3b278dc477394b246ea515bd0e21d9-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"9d3b278dc477394b246ea515bd0e21d9\") " pod="kube-system/kube-apiserver-localhost" Jul 14 22:13:38.175927 kubelet[1658]: I0714 22:13:38.175844 1658 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/fad475d3be2e7026903cdccc200d075f-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"fad475d3be2e7026903cdccc200d075f\") " pod="kube-system/kube-scheduler-localhost" Jul 14 22:13:38.228092 kubelet[1658]: I0714 22:13:38.228053 1658 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 14 22:13:38.228417 kubelet[1658]: E0714 22:13:38.228387 1658 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.132:6443/api/v1/nodes\": dial tcp 10.0.0.132:6443: connect: connection refused" node="localhost" Jul 14 22:13:38.321679 kubelet[1658]: E0714 22:13:38.321054 1658 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:38.321807 env[1215]: time="2025-07-14T22:13:38.321656719Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:7883c2a360afc5b3c9b064549b9b0c8d,Namespace:kube-system,Attempt:0,}" Jul 14 22:13:38.338243 kubelet[1658]: E0714 22:13:38.338201 1658 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:38.338720 env[1215]: time="2025-07-14T22:13:38.338688029Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:fad475d3be2e7026903cdccc200d075f,Namespace:kube-system,Attempt:0,}" Jul 14 22:13:38.342067 kubelet[1658]: E0714 22:13:38.342038 1658 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:38.342599 env[1215]: time="2025-07-14T22:13:38.342453347Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:9d3b278dc477394b246ea515bd0e21d9,Namespace:kube-system,Attempt:0,}" Jul 14 22:13:38.477395 kubelet[1658]: E0714 22:13:38.477349 1658 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.132:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.132:6443: connect: connection refused" interval="800ms" Jul 14 22:13:38.630215 kubelet[1658]: I0714 22:13:38.630117 1658 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 14 22:13:38.630707 kubelet[1658]: E0714 22:13:38.630683 1658 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.132:6443/api/v1/nodes\": dial tcp 10.0.0.132:6443: connect: connection refused" node="localhost" Jul 14 22:13:38.664225 kubelet[1658]: E0714 22:13:38.664187 1658 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.0.0.132:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.132:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Jul 14 22:13:38.771535 kubelet[1658]: E0714 22:13:38.771480 1658 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.0.0.132:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.132:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Jul 14 22:13:38.834660 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount59363751.mount: Deactivated successfully. Jul 14 22:13:38.838209 env[1215]: time="2025-07-14T22:13:38.838161185Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:38.840982 env[1215]: time="2025-07-14T22:13:38.840948344Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:38.842341 env[1215]: time="2025-07-14T22:13:38.842308356Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:38.843189 env[1215]: time="2025-07-14T22:13:38.843160483Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:38.844104 env[1215]: time="2025-07-14T22:13:38.844076226Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:38.845738 env[1215]: time="2025-07-14T22:13:38.845702823Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:38.847999 env[1215]: time="2025-07-14T22:13:38.847967895Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:38.850940 env[1215]: time="2025-07-14T22:13:38.850910012Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:38.852510 env[1215]: time="2025-07-14T22:13:38.852484315Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:38.854002 env[1215]: time="2025-07-14T22:13:38.853975399Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:38.854794 env[1215]: time="2025-07-14T22:13:38.854768312Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:38.855594 env[1215]: time="2025-07-14T22:13:38.855567627Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:38.874632 env[1215]: time="2025-07-14T22:13:38.874559295Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:13:38.874771 env[1215]: time="2025-07-14T22:13:38.874611307Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:13:38.874771 env[1215]: time="2025-07-14T22:13:38.874621790Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:13:38.874846 env[1215]: time="2025-07-14T22:13:38.874828360Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3f0564caee8fbbe35d2e7017726402fd8d6e57dd53035d57e66704c45df04d79 pid=1708 runtime=io.containerd.runc.v2 Jul 14 22:13:38.879796 env[1215]: time="2025-07-14T22:13:38.879608085Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:13:38.879796 env[1215]: time="2025-07-14T22:13:38.879648615Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:13:38.879796 env[1215]: time="2025-07-14T22:13:38.879660178Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:13:38.880086 env[1215]: time="2025-07-14T22:13:38.880018185Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ba71446a631f70387d61603475e824dff02afd5e28d2fbbd84f8d41a7a400279 pid=1713 runtime=io.containerd.runc.v2 Jul 14 22:13:38.881494 env[1215]: time="2025-07-14T22:13:38.881399162Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:13:38.881574 env[1215]: time="2025-07-14T22:13:38.881432970Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:13:38.881574 env[1215]: time="2025-07-14T22:13:38.881456736Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:13:38.882495 env[1215]: time="2025-07-14T22:13:38.882446457Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6e8edd59213aa7abb2ba77e4d557110a1f30889cd7ca0c4cc9dc3d60e65fed1e pid=1735 runtime=io.containerd.runc.v2 Jul 14 22:13:38.893571 systemd[1]: Started cri-containerd-ba71446a631f70387d61603475e824dff02afd5e28d2fbbd84f8d41a7a400279.scope. Jul 14 22:13:38.910160 systemd[1]: Started cri-containerd-3f0564caee8fbbe35d2e7017726402fd8d6e57dd53035d57e66704c45df04d79.scope. Jul 14 22:13:38.914083 systemd[1]: Started cri-containerd-6e8edd59213aa7abb2ba77e4d557110a1f30889cd7ca0c4cc9dc3d60e65fed1e.scope. Jul 14 22:13:38.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit: BPF prog-id=61 op=LOAD Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1746]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=1713 pid=1746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:38.934000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261373134343661363331663730333837643631363033343735653832 Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1746]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=1713 pid=1746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:38.934000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261373134343661363331663730333837643631363033343735653832 Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit: BPF prog-id=62 op=LOAD Jul 14 22:13:38.934000 audit[1746]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=1713 pid=1746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:38.934000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261373134343661363331663730333837643631363033343735653832 Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit: BPF prog-id=63 op=LOAD Jul 14 22:13:38.934000 audit[1746]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=1713 pid=1746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:38.934000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261373134343661363331663730333837643631363033343735653832 Jul 14 22:13:38.934000 audit: BPF prog-id=63 op=UNLOAD Jul 14 22:13:38.934000 audit: BPF prog-id=62 op=UNLOAD Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.934000 audit: BPF prog-id=64 op=LOAD Jul 14 22:13:38.934000 audit[1746]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=1713 pid=1746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:38.934000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261373134343661363331663730333837643631363033343735653832 Jul 14 22:13:38.935000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.935000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.935000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.935000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.935000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.935000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.935000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.935000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.935000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.935000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.935000 audit: BPF prog-id=65 op=LOAD Jul 14 22:13:38.935000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.935000 audit[1731]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1708 pid=1731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:38.935000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366303536346361656538666262653335643265373031373732363430 Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit[1731]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1708 pid=1731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:38.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366303536346361656538666262653335643265373031373732363430 Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit: BPF prog-id=66 op=LOAD Jul 14 22:13:38.936000 audit[1731]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1708 pid=1731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:38.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366303536346361656538666262653335643265373031373732363430 Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit: BPF prog-id=67 op=LOAD Jul 14 22:13:38.936000 audit[1731]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1708 pid=1731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:38.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366303536346361656538666262653335643265373031373732363430 Jul 14 22:13:38.936000 audit: BPF prog-id=67 op=UNLOAD Jul 14 22:13:38.936000 audit: BPF prog-id=66 op=UNLOAD Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.936000 audit: BPF prog-id=68 op=LOAD Jul 14 22:13:38.936000 audit[1731]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1708 pid=1731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:38.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366303536346361656538666262653335643265373031373732363430 Jul 14 22:13:38.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit: BPF prog-id=69 op=LOAD Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { bpf } for pid=1755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit[1755]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1735 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:38.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665386564643539323133616137616262326261373765346435353731 Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit[1755]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1735 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:38.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665386564643539323133616137616262326261373765346435353731 Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { bpf } for pid=1755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { bpf } for pid=1755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { bpf } for pid=1755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { bpf } for pid=1755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { bpf } for pid=1755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit: BPF prog-id=70 op=LOAD Jul 14 22:13:38.941000 audit[1755]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1735 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:38.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665386564643539323133616137616262326261373765346435353731 Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { bpf } for pid=1755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { bpf } for pid=1755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { bpf } for pid=1755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { bpf } for pid=1755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit: BPF prog-id=71 op=LOAD Jul 14 22:13:38.941000 audit[1755]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1735 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:38.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665386564643539323133616137616262326261373765346435353731 Jul 14 22:13:38.941000 audit: BPF prog-id=71 op=UNLOAD Jul 14 22:13:38.941000 audit: BPF prog-id=70 op=UNLOAD Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { bpf } for pid=1755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { bpf } for pid=1755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { bpf } for pid=1755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { bpf } for pid=1755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit[1755]: AVC avc: denied { bpf } for pid=1755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:38.941000 audit: BPF prog-id=72 op=LOAD Jul 14 22:13:38.941000 audit[1755]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1735 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:38.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665386564643539323133616137616262326261373765346435353731 Jul 14 22:13:38.960169 env[1215]: time="2025-07-14T22:13:38.960123986Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:fad475d3be2e7026903cdccc200d075f,Namespace:kube-system,Attempt:0,} returns sandbox id \"ba71446a631f70387d61603475e824dff02afd5e28d2fbbd84f8d41a7a400279\"" Jul 14 22:13:38.961202 kubelet[1658]: E0714 22:13:38.960985 1658 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:38.964626 env[1215]: time="2025-07-14T22:13:38.964581832Z" level=info msg="CreateContainer within sandbox \"ba71446a631f70387d61603475e824dff02afd5e28d2fbbd84f8d41a7a400279\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 14 22:13:38.968637 env[1215]: time="2025-07-14T22:13:38.968605533Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:7883c2a360afc5b3c9b064549b9b0c8d,Namespace:kube-system,Attempt:0,} returns sandbox id \"3f0564caee8fbbe35d2e7017726402fd8d6e57dd53035d57e66704c45df04d79\"" Jul 14 22:13:38.969319 kubelet[1658]: E0714 22:13:38.969153 1658 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:38.972155 env[1215]: time="2025-07-14T22:13:38.972119269Z" level=info msg="CreateContainer within sandbox \"3f0564caee8fbbe35d2e7017726402fd8d6e57dd53035d57e66704c45df04d79\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 14 22:13:38.973834 env[1215]: time="2025-07-14T22:13:38.973798718Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:9d3b278dc477394b246ea515bd0e21d9,Namespace:kube-system,Attempt:0,} returns sandbox id \"6e8edd59213aa7abb2ba77e4d557110a1f30889cd7ca0c4cc9dc3d60e65fed1e\"" Jul 14 22:13:38.974468 kubelet[1658]: E0714 22:13:38.974327 1658 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:38.975705 env[1215]: time="2025-07-14T22:13:38.975659012Z" level=info msg="CreateContainer within sandbox \"ba71446a631f70387d61603475e824dff02afd5e28d2fbbd84f8d41a7a400279\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"747a98a82b04f2615dfaa9f8614f02e238de4ed0138073bb7e2db71f33d728a6\"" Jul 14 22:13:38.976306 env[1215]: time="2025-07-14T22:13:38.976277922Z" level=info msg="StartContainer for \"747a98a82b04f2615dfaa9f8614f02e238de4ed0138073bb7e2db71f33d728a6\"" Jul 14 22:13:38.977283 env[1215]: time="2025-07-14T22:13:38.977246238Z" level=info msg="CreateContainer within sandbox \"6e8edd59213aa7abb2ba77e4d557110a1f30889cd7ca0c4cc9dc3d60e65fed1e\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 14 22:13:38.987033 env[1215]: time="2025-07-14T22:13:38.986996374Z" level=info msg="CreateContainer within sandbox \"3f0564caee8fbbe35d2e7017726402fd8d6e57dd53035d57e66704c45df04d79\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"b720d6c6fee67591ce9660bb30f11a70a762ebb6837904118756495565765f9f\"" Jul 14 22:13:38.987473 env[1215]: time="2025-07-14T22:13:38.987424879Z" level=info msg="StartContainer for \"b720d6c6fee67591ce9660bb30f11a70a762ebb6837904118756495565765f9f\"" Jul 14 22:13:38.989637 env[1215]: time="2025-07-14T22:13:38.989604810Z" level=info msg="CreateContainer within sandbox \"6e8edd59213aa7abb2ba77e4d557110a1f30889cd7ca0c4cc9dc3d60e65fed1e\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"7bd0f668f07f0006b53342edd187e94920f1a929d63ca4dc6034e27b50e230af\"" Jul 14 22:13:38.990870 env[1215]: time="2025-07-14T22:13:38.990829909Z" level=info msg="StartContainer for \"7bd0f668f07f0006b53342edd187e94920f1a929d63ca4dc6034e27b50e230af\"" Jul 14 22:13:38.992770 systemd[1]: Started cri-containerd-747a98a82b04f2615dfaa9f8614f02e238de4ed0138073bb7e2db71f33d728a6.scope. Jul 14 22:13:39.011052 systemd[1]: Started cri-containerd-b720d6c6fee67591ce9660bb30f11a70a762ebb6837904118756495565765f9f.scope. Jul 14 22:13:39.020880 systemd[1]: Started cri-containerd-7bd0f668f07f0006b53342edd187e94920f1a929d63ca4dc6034e27b50e230af.scope. Jul 14 22:13:39.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.034000 audit: BPF prog-id=73 op=LOAD Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { bpf } for pid=1828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit[1828]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=1713 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:39.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734376139386138326230346632363135646661613966383631346630 Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { perfmon } for pid=1828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit[1828]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=1713 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:39.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734376139386138326230346632363135646661613966383631346630 Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { bpf } for pid=1828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { bpf } for pid=1828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { bpf } for pid=1828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { perfmon } for pid=1828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { perfmon } for pid=1828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { perfmon } for pid=1828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { perfmon } for pid=1828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { perfmon } for pid=1828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { bpf } for pid=1828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { bpf } for pid=1828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit: BPF prog-id=74 op=LOAD Jul 14 22:13:39.035000 audit[1828]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=1713 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:39.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734376139386138326230346632363135646661613966383631346630 Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { bpf } for pid=1828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { bpf } for pid=1828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { perfmon } for pid=1828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { perfmon } for pid=1828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { perfmon } for pid=1828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { perfmon } for pid=1828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { perfmon } for pid=1828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { bpf } for pid=1828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { bpf } for pid=1828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit: BPF prog-id=75 op=LOAD Jul 14 22:13:39.035000 audit[1828]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=1713 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:39.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734376139386138326230346632363135646661613966383631346630 Jul 14 22:13:39.035000 audit: BPF prog-id=75 op=UNLOAD Jul 14 22:13:39.035000 audit: BPF prog-id=74 op=UNLOAD Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { bpf } for pid=1828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { bpf } for pid=1828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { bpf } for pid=1828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { perfmon } for pid=1828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { perfmon } for pid=1828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { perfmon } for pid=1828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { perfmon } for pid=1828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { perfmon } for pid=1828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { bpf } for pid=1828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit[1828]: AVC avc: denied { bpf } for pid=1828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.035000 audit: BPF prog-id=76 op=LOAD Jul 14 22:13:39.035000 audit[1828]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=1713 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:39.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734376139386138326230346632363135646661613966383631346630 Jul 14 22:13:39.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit: BPF prog-id=77 op=LOAD Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { bpf } for pid=1854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1854]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1735 pid=1854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:39.039000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762643066363638663037663030303662353333343265646431383765 Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { perfmon } for pid=1854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1854]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1735 pid=1854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:39.039000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762643066363638663037663030303662353333343265646431383765 Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { bpf } for pid=1854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { bpf } for pid=1854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { bpf } for pid=1854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { perfmon } for pid=1854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { perfmon } for pid=1854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { perfmon } for pid=1854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { perfmon } for pid=1854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { perfmon } for pid=1854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { bpf } for pid=1854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { bpf } for pid=1854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit: BPF prog-id=78 op=LOAD Jul 14 22:13:39.039000 audit[1854]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1735 pid=1854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:39.039000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762643066363638663037663030303662353333343265646431383765 Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { bpf } for pid=1854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { bpf } for pid=1854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { perfmon } for pid=1854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { perfmon } for pid=1854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { perfmon } for pid=1854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { perfmon } for pid=1854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { perfmon } for pid=1854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { bpf } for pid=1854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { bpf } for pid=1854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit: BPF prog-id=79 op=LOAD Jul 14 22:13:39.039000 audit[1854]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1735 pid=1854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:39.039000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762643066363638663037663030303662353333343265646431383765 Jul 14 22:13:39.039000 audit: BPF prog-id=79 op=UNLOAD Jul 14 22:13:39.039000 audit: BPF prog-id=78 op=UNLOAD Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { bpf } for pid=1854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { bpf } for pid=1854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { bpf } for pid=1854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { perfmon } for pid=1854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { perfmon } for pid=1854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { perfmon } for pid=1854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { perfmon } for pid=1854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { perfmon } for pid=1854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { bpf } for pid=1854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit[1854]: AVC avc: denied { bpf } for pid=1854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.039000 audit: BPF prog-id=80 op=LOAD Jul 14 22:13:39.039000 audit[1854]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1735 pid=1854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:39.039000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762643066363638663037663030303662353333343265646431383765 Jul 14 22:13:39.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.040000 audit: BPF prog-id=81 op=LOAD Jul 14 22:13:39.040000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.040000 audit[1855]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1708 pid=1855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:39.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237323064366336666565363735393163653936363062623330663131 Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit[1855]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1708 pid=1855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:39.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237323064366336666565363735393163653936363062623330663131 Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit: BPF prog-id=82 op=LOAD Jul 14 22:13:39.041000 audit[1855]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1708 pid=1855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:39.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237323064366336666565363735393163653936363062623330663131 Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit: BPF prog-id=83 op=LOAD Jul 14 22:13:39.041000 audit[1855]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1708 pid=1855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:39.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237323064366336666565363735393163653936363062623330663131 Jul 14 22:13:39.041000 audit: BPF prog-id=83 op=UNLOAD Jul 14 22:13:39.041000 audit: BPF prog-id=82 op=UNLOAD Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:39.041000 audit: BPF prog-id=84 op=LOAD Jul 14 22:13:39.041000 audit[1855]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1708 pid=1855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:39.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237323064366336666565363735393163653936363062623330663131 Jul 14 22:13:39.068060 env[1215]: time="2025-07-14T22:13:39.063861246Z" level=info msg="StartContainer for \"747a98a82b04f2615dfaa9f8614f02e238de4ed0138073bb7e2db71f33d728a6\" returns successfully" Jul 14 22:13:39.078415 env[1215]: time="2025-07-14T22:13:39.078366638Z" level=info msg="StartContainer for \"7bd0f668f07f0006b53342edd187e94920f1a929d63ca4dc6034e27b50e230af\" returns successfully" Jul 14 22:13:39.082797 env[1215]: time="2025-07-14T22:13:39.080189465Z" level=info msg="StartContainer for \"b720d6c6fee67591ce9660bb30f11a70a762ebb6837904118756495565765f9f\" returns successfully" Jul 14 22:13:39.199608 kubelet[1658]: E0714 22:13:39.199501 1658 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.0.0.132:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.132:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Jul 14 22:13:39.432456 kubelet[1658]: I0714 22:13:39.432422 1658 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 14 22:13:39.905246 kubelet[1658]: E0714 22:13:39.905217 1658 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 22:13:39.905683 kubelet[1658]: E0714 22:13:39.905666 1658 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:39.907278 kubelet[1658]: E0714 22:13:39.907256 1658 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 22:13:39.907452 kubelet[1658]: E0714 22:13:39.907436 1658 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:39.908262 kubelet[1658]: E0714 22:13:39.908240 1658 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 22:13:39.908463 kubelet[1658]: E0714 22:13:39.908423 1658 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:40.909801 kubelet[1658]: E0714 22:13:40.909771 1658 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 22:13:40.910461 kubelet[1658]: E0714 22:13:40.910444 1658 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:40.910604 kubelet[1658]: E0714 22:13:40.910317 1658 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 22:13:40.910782 kubelet[1658]: E0714 22:13:40.910765 1658 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:41.349000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:13:41.351309 kernel: kauditd_printk_skb: 574 callbacks suppressed Jul 14 22:13:41.351347 kernel: audit: type=1400 audit(1752531221.349:556): avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:13:41.349000 audit[1883]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40046f4c90 a2=fc6 a3=0 items=0 ppid=1735 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 key=(null) Jul 14 22:13:41.357982 kernel: audit: type=1300 audit(1752531221.349:556): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40046f4c90 a2=fc6 a3=0 items=0 ppid=1735 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 key=(null) Jul 14 22:13:41.349000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:13:41.361320 kernel: audit: type=1327 audit(1752531221.349:556): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:13:41.349000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:13:41.364284 kernel: audit: type=1400 audit(1752531221.349:557): avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:13:41.364328 kernel: audit: type=1300 audit(1752531221.349:557): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=400216e880 a2=fc6 a3=0 items=0 ppid=1735 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 key=(null) Jul 14 22:13:41.349000 audit[1883]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=400216e880 a2=fc6 a3=0 items=0 ppid=1735 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 key=(null) Jul 14 22:13:41.349000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:13:41.371200 kernel: audit: type=1327 audit(1752531221.349:557): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:13:41.371255 kernel: audit: type=1400 audit(1752531221.351:558): avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:13:41.351000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:13:41.351000 audit[1883]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=400773d9b0 a2=fc6 a3=0 items=0 ppid=1735 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 key=(null) Jul 14 22:13:41.377928 kernel: audit: type=1300 audit(1752531221.351:558): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=400773d9b0 a2=fc6 a3=0 items=0 ppid=1735 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 key=(null) Jul 14 22:13:41.377979 kernel: audit: type=1327 audit(1752531221.351:558): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:13:41.351000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:13:41.352000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:13:41.384182 kernel: audit: type=1400 audit(1752531221.352:559): avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:13:41.352000 audit[1883]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4b a1=40043f40f0 a2=fc6 a3=0 items=0 ppid=1735 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 key=(null) Jul 14 22:13:41.352000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:13:41.358000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:13:41.358000 audit[1883]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=61 a1=40033b80a0 a2=fc6 a3=0 items=0 ppid=1735 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 key=(null) Jul 14 22:13:41.358000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:13:41.358000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:13:41.358000 audit[1883]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=61 a1=4007038ae0 a2=fc6 a3=0 items=0 ppid=1735 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 key=(null) Jul 14 22:13:41.358000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:13:41.471686 kubelet[1658]: E0714 22:13:41.471637 1658 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Jul 14 22:13:41.471000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:13:41.471000 audit[1881]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400013aa20 a2=fc6 a3=0 items=0 ppid=1708 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 key=(null) Jul 14 22:13:41.471000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:13:41.471000 audit[1881]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400037a360 a2=fc6 a3=0 items=0 ppid=1708 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 key=(null) Jul 14 22:13:41.471000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:13:41.471000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:13:41.522995 kubelet[1658]: I0714 22:13:41.522961 1658 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 14 22:13:41.574571 kubelet[1658]: I0714 22:13:41.574509 1658 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 14 22:13:41.581631 kubelet[1658]: E0714 22:13:41.581579 1658 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Jul 14 22:13:41.581631 kubelet[1658]: I0714 22:13:41.581611 1658 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 14 22:13:41.583781 kubelet[1658]: E0714 22:13:41.583747 1658 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Jul 14 22:13:41.583781 kubelet[1658]: I0714 22:13:41.583772 1658 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 14 22:13:41.585273 kubelet[1658]: E0714 22:13:41.585246 1658 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Jul 14 22:13:41.857903 kubelet[1658]: I0714 22:13:41.857868 1658 apiserver.go:52] "Watching apiserver" Jul 14 22:13:41.874882 kubelet[1658]: I0714 22:13:41.874853 1658 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 14 22:13:43.199464 kubelet[1658]: I0714 22:13:43.199310 1658 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 14 22:13:43.206278 kubelet[1658]: E0714 22:13:43.206241 1658 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:43.352061 kubelet[1658]: I0714 22:13:43.351966 1658 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 14 22:13:43.357580 kubelet[1658]: E0714 22:13:43.357504 1658 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:43.541313 systemd[1]: Reloading. Jul 14 22:13:43.594761 /usr/lib/systemd/system-generators/torcx-generator[1965]: time="2025-07-14T22:13:43Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.101 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.101 /var/lib/torcx/store]" Jul 14 22:13:43.594789 /usr/lib/systemd/system-generators/torcx-generator[1965]: time="2025-07-14T22:13:43Z" level=info msg="torcx already run" Jul 14 22:13:43.658737 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 14 22:13:43.658755 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 14 22:13:43.674828 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 14 22:13:43.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.735000 audit: BPF prog-id=85 op=LOAD Jul 14 22:13:43.736000 audit: BPF prog-id=46 op=UNLOAD Jul 14 22:13:43.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.736000 audit: BPF prog-id=86 op=LOAD Jul 14 22:13:43.736000 audit: BPF prog-id=61 op=UNLOAD Jul 14 22:13:43.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.736000 audit: BPF prog-id=87 op=LOAD Jul 14 22:13:43.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.736000 audit: BPF prog-id=88 op=LOAD Jul 14 22:13:43.736000 audit: BPF prog-id=47 op=UNLOAD Jul 14 22:13:43.736000 audit: BPF prog-id=48 op=UNLOAD Jul 14 22:13:43.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.737000 audit: BPF prog-id=89 op=LOAD Jul 14 22:13:43.737000 audit: BPF prog-id=49 op=UNLOAD Jul 14 22:13:43.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.738000 audit: BPF prog-id=90 op=LOAD Jul 14 22:13:43.738000 audit: BPF prog-id=73 op=UNLOAD Jul 14 22:13:43.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit: BPF prog-id=91 op=LOAD Jul 14 22:13:43.740000 audit: BPF prog-id=50 op=UNLOAD Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit: BPF prog-id=92 op=LOAD Jul 14 22:13:43.740000 audit: BPF prog-id=51 op=UNLOAD Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit: BPF prog-id=93 op=LOAD Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit: BPF prog-id=94 op=LOAD Jul 14 22:13:43.740000 audit: BPF prog-id=52 op=UNLOAD Jul 14 22:13:43.740000 audit: BPF prog-id=53 op=UNLOAD Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.741000 audit: BPF prog-id=95 op=LOAD Jul 14 22:13:43.741000 audit: BPF prog-id=69 op=UNLOAD Jul 14 22:13:43.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.741000 audit: BPF prog-id=96 op=LOAD Jul 14 22:13:43.741000 audit: BPF prog-id=81 op=UNLOAD Jul 14 22:13:43.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.743000 audit: BPF prog-id=97 op=LOAD Jul 14 22:13:43.743000 audit: BPF prog-id=54 op=UNLOAD Jul 14 22:13:43.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.743000 audit: BPF prog-id=98 op=LOAD Jul 14 22:13:43.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.743000 audit: BPF prog-id=99 op=LOAD Jul 14 22:13:43.743000 audit: BPF prog-id=55 op=UNLOAD Jul 14 22:13:43.743000 audit: BPF prog-id=56 op=UNLOAD Jul 14 22:13:43.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.744000 audit: BPF prog-id=100 op=LOAD Jul 14 22:13:43.744000 audit: BPF prog-id=77 op=UNLOAD Jul 14 22:13:43.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.745000 audit: BPF prog-id=101 op=LOAD Jul 14 22:13:43.745000 audit: BPF prog-id=57 op=UNLOAD Jul 14 22:13:43.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.746000 audit: BPF prog-id=102 op=LOAD Jul 14 22:13:43.746000 audit: BPF prog-id=58 op=UNLOAD Jul 14 22:13:43.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.746000 audit: BPF prog-id=103 op=LOAD Jul 14 22:13:43.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.746000 audit: BPF prog-id=104 op=LOAD Jul 14 22:13:43.746000 audit: BPF prog-id=59 op=UNLOAD Jul 14 22:13:43.746000 audit: BPF prog-id=60 op=UNLOAD Jul 14 22:13:43.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.747000 audit: BPF prog-id=105 op=LOAD Jul 14 22:13:43.747000 audit: BPF prog-id=65 op=UNLOAD Jul 14 22:13:43.757597 kubelet[1658]: I0714 22:13:43.757519 1658 dynamic_cafile_content.go:175] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 14 22:13:43.760214 systemd[1]: Stopping kubelet.service... Jul 14 22:13:43.781991 systemd[1]: kubelet.service: Deactivated successfully. Jul 14 22:13:43.782166 systemd[1]: Stopped kubelet.service. Jul 14 22:13:43.781000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:13:43.782227 systemd[1]: kubelet.service: Consumed 1.607s CPU time. Jul 14 22:13:43.783824 systemd[1]: Starting kubelet.service... Jul 14 22:13:43.880474 systemd[1]: Started kubelet.service. Jul 14 22:13:43.880000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:13:43.914302 kubelet[2006]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 14 22:13:43.914589 kubelet[2006]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 14 22:13:43.914636 kubelet[2006]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 14 22:13:43.914819 kubelet[2006]: I0714 22:13:43.914780 2006 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 14 22:13:43.922953 kubelet[2006]: I0714 22:13:43.922921 2006 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Jul 14 22:13:43.923055 kubelet[2006]: I0714 22:13:43.923043 2006 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 14 22:13:43.923307 kubelet[2006]: I0714 22:13:43.923285 2006 server.go:956] "Client rotation is on, will bootstrap in background" Jul 14 22:13:43.924607 kubelet[2006]: I0714 22:13:43.924580 2006 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Jul 14 22:13:43.927165 kubelet[2006]: I0714 22:13:43.927130 2006 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 14 22:13:43.933208 kubelet[2006]: E0714 22:13:43.933180 2006 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 14 22:13:43.933208 kubelet[2006]: I0714 22:13:43.933208 2006 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 14 22:13:43.936335 kubelet[2006]: I0714 22:13:43.936293 2006 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 14 22:13:43.936691 kubelet[2006]: I0714 22:13:43.936667 2006 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 14 22:13:43.937051 kubelet[2006]: I0714 22:13:43.936790 2006 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 14 22:13:43.937251 kubelet[2006]: I0714 22:13:43.937236 2006 topology_manager.go:138] "Creating topology manager with none policy" Jul 14 22:13:43.937611 kubelet[2006]: I0714 22:13:43.937596 2006 container_manager_linux.go:303] "Creating device plugin manager" Jul 14 22:13:43.937793 kubelet[2006]: I0714 22:13:43.937779 2006 state_mem.go:36] "Initialized new in-memory state store" Jul 14 22:13:43.938275 kubelet[2006]: I0714 22:13:43.938251 2006 kubelet.go:480] "Attempting to sync node with API server" Jul 14 22:13:43.938378 kubelet[2006]: I0714 22:13:43.938292 2006 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 14 22:13:43.938378 kubelet[2006]: I0714 22:13:43.938326 2006 kubelet.go:386] "Adding apiserver pod source" Jul 14 22:13:43.938378 kubelet[2006]: I0714 22:13:43.938343 2006 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 14 22:13:43.939176 kubelet[2006]: I0714 22:13:43.939155 2006 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 14 22:13:43.939903 kubelet[2006]: I0714 22:13:43.939884 2006 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Jul 14 22:13:43.941584 kubelet[2006]: I0714 22:13:43.941563 2006 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 14 22:13:43.941696 kubelet[2006]: I0714 22:13:43.941683 2006 server.go:1289] "Started kubelet" Jul 14 22:13:43.942000 audit[2006]: AVC avc: denied { mac_admin } for pid=2006 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.942000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 22:13:43.942000 audit[2006]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b1fd70 a1=4000b86978 a2=4000b1fd40 a3=25 items=0 ppid=1 pid=2006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:43.942000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 22:13:43.943355 kubelet[2006]: I0714 22:13:43.943326 2006 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 14 22:13:43.942000 audit[2006]: AVC avc: denied { mac_admin } for pid=2006 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.942000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 22:13:43.942000 audit[2006]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40004a1380 a1=4000b86990 a2=4000b1fe00 a3=25 items=0 ppid=1 pid=2006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:43.942000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 22:13:43.943627 kubelet[2006]: I0714 22:13:43.943609 2006 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 14 22:13:43.943705 kubelet[2006]: I0714 22:13:43.943694 2006 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 14 22:13:43.953826 kubelet[2006]: I0714 22:13:43.951386 2006 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Jul 14 22:13:43.953826 kubelet[2006]: I0714 22:13:43.952114 2006 server.go:317] "Adding debug handlers to kubelet server" Jul 14 22:13:43.956939 kubelet[2006]: I0714 22:13:43.956882 2006 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 14 22:13:43.957113 kubelet[2006]: I0714 22:13:43.957088 2006 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 14 22:13:43.957273 kubelet[2006]: I0714 22:13:43.957251 2006 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 14 22:13:43.958067 kubelet[2006]: E0714 22:13:43.958042 2006 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 14 22:13:43.958271 kubelet[2006]: I0714 22:13:43.958206 2006 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 14 22:13:43.958417 kubelet[2006]: I0714 22:13:43.958380 2006 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 14 22:13:43.958554 kubelet[2006]: I0714 22:13:43.958526 2006 reconciler.go:26] "Reconciler: start to sync state" Jul 14 22:13:43.960675 kubelet[2006]: I0714 22:13:43.959991 2006 factory.go:223] Registration of the systemd container factory successfully Jul 14 22:13:43.960675 kubelet[2006]: I0714 22:13:43.960136 2006 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 14 22:13:43.963520 kubelet[2006]: I0714 22:13:43.962196 2006 factory.go:223] Registration of the containerd container factory successfully Jul 14 22:13:43.974125 kubelet[2006]: I0714 22:13:43.974090 2006 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Jul 14 22:13:43.979110 kubelet[2006]: I0714 22:13:43.979082 2006 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Jul 14 22:13:43.979215 kubelet[2006]: I0714 22:13:43.979203 2006 status_manager.go:230] "Starting to sync pod status with apiserver" Jul 14 22:13:43.979305 kubelet[2006]: I0714 22:13:43.979289 2006 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 14 22:13:43.979376 kubelet[2006]: I0714 22:13:43.979364 2006 kubelet.go:2436] "Starting kubelet main sync loop" Jul 14 22:13:43.979541 kubelet[2006]: E0714 22:13:43.979511 2006 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 14 22:13:43.995617 kubelet[2006]: I0714 22:13:43.995597 2006 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 14 22:13:43.995815 kubelet[2006]: I0714 22:13:43.995795 2006 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 14 22:13:43.995886 kubelet[2006]: I0714 22:13:43.995876 2006 state_mem.go:36] "Initialized new in-memory state store" Jul 14 22:13:43.996050 kubelet[2006]: I0714 22:13:43.996034 2006 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 14 22:13:43.996154 kubelet[2006]: I0714 22:13:43.996127 2006 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 14 22:13:43.996217 kubelet[2006]: I0714 22:13:43.996208 2006 policy_none.go:49] "None policy: Start" Jul 14 22:13:43.996279 kubelet[2006]: I0714 22:13:43.996268 2006 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 14 22:13:43.996353 kubelet[2006]: I0714 22:13:43.996342 2006 state_mem.go:35] "Initializing new in-memory state store" Jul 14 22:13:43.996513 kubelet[2006]: I0714 22:13:43.996498 2006 state_mem.go:75] "Updated machine memory state" Jul 14 22:13:44.000252 kubelet[2006]: E0714 22:13:44.000077 2006 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Jul 14 22:13:43.999000 audit[2006]: AVC avc: denied { mac_admin } for pid=2006 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:43.999000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 22:13:43.999000 audit[2006]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000bf66c0 a1=4000e7aa50 a2=4000bf6690 a3=25 items=0 ppid=1 pid=2006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:43.999000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 22:13:44.000513 kubelet[2006]: E0714 22:13:44.000289 2006 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Jul 14 22:13:44.000513 kubelet[2006]: I0714 22:13:44.000446 2006 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 14 22:13:44.000513 kubelet[2006]: I0714 22:13:44.000460 2006 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 14 22:13:44.002772 kubelet[2006]: I0714 22:13:44.002719 2006 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 14 22:13:44.004223 kubelet[2006]: E0714 22:13:44.004200 2006 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 14 22:13:44.080561 kubelet[2006]: I0714 22:13:44.080527 2006 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 14 22:13:44.080561 kubelet[2006]: I0714 22:13:44.080542 2006 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 14 22:13:44.081029 kubelet[2006]: I0714 22:13:44.081003 2006 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 14 22:13:44.090251 kubelet[2006]: E0714 22:13:44.090214 2006 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Jul 14 22:13:44.090419 kubelet[2006]: E0714 22:13:44.090278 2006 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 14 22:13:44.111385 kubelet[2006]: I0714 22:13:44.111344 2006 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 14 22:13:44.151808 kubelet[2006]: I0714 22:13:44.151707 2006 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Jul 14 22:13:44.151808 kubelet[2006]: I0714 22:13:44.151800 2006 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 14 22:13:44.158924 kubelet[2006]: I0714 22:13:44.158885 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/9d3b278dc477394b246ea515bd0e21d9-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"9d3b278dc477394b246ea515bd0e21d9\") " pod="kube-system/kube-apiserver-localhost" Jul 14 22:13:44.260524 kubelet[2006]: I0714 22:13:44.260446 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/9d3b278dc477394b246ea515bd0e21d9-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"9d3b278dc477394b246ea515bd0e21d9\") " pod="kube-system/kube-apiserver-localhost" Jul 14 22:13:44.260524 kubelet[2006]: I0714 22:13:44.260489 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/9d3b278dc477394b246ea515bd0e21d9-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"9d3b278dc477394b246ea515bd0e21d9\") " pod="kube-system/kube-apiserver-localhost" Jul 14 22:13:44.260524 kubelet[2006]: I0714 22:13:44.260509 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/7883c2a360afc5b3c9b064549b9b0c8d-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"7883c2a360afc5b3c9b064549b9b0c8d\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:13:44.260524 kubelet[2006]: I0714 22:13:44.260522 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/7883c2a360afc5b3c9b064549b9b0c8d-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"7883c2a360afc5b3c9b064549b9b0c8d\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:13:44.260698 kubelet[2006]: I0714 22:13:44.260564 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/7883c2a360afc5b3c9b064549b9b0c8d-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"7883c2a360afc5b3c9b064549b9b0c8d\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:13:44.260698 kubelet[2006]: I0714 22:13:44.260579 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/7883c2a360afc5b3c9b064549b9b0c8d-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"7883c2a360afc5b3c9b064549b9b0c8d\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:13:44.260698 kubelet[2006]: I0714 22:13:44.260593 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/7883c2a360afc5b3c9b064549b9b0c8d-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"7883c2a360afc5b3c9b064549b9b0c8d\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:13:44.260698 kubelet[2006]: I0714 22:13:44.260609 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/fad475d3be2e7026903cdccc200d075f-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"fad475d3be2e7026903cdccc200d075f\") " pod="kube-system/kube-scheduler-localhost" Jul 14 22:13:44.391109 kubelet[2006]: E0714 22:13:44.391084 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:44.391262 kubelet[2006]: E0714 22:13:44.391218 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:44.391320 kubelet[2006]: E0714 22:13:44.391138 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:44.939295 kubelet[2006]: I0714 22:13:44.939171 2006 apiserver.go:52] "Watching apiserver" Jul 14 22:13:44.959354 kubelet[2006]: I0714 22:13:44.959316 2006 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 14 22:13:44.988604 kubelet[2006]: E0714 22:13:44.988581 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:44.989215 kubelet[2006]: I0714 22:13:44.988789 2006 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 14 22:13:44.989379 kubelet[2006]: E0714 22:13:44.988999 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:44.996179 kubelet[2006]: E0714 22:13:44.996090 2006 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 14 22:13:44.996453 kubelet[2006]: E0714 22:13:44.996432 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:45.015020 kubelet[2006]: I0714 22:13:45.014955 2006 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=2.014924621 podStartE2EDuration="2.014924621s" podCreationTimestamp="2025-07-14 22:13:43 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 22:13:45.010772406 +0000 UTC m=+1.125946051" watchObservedRunningTime="2025-07-14 22:13:45.014924621 +0000 UTC m=+1.130098266" Jul 14 22:13:45.029700 kubelet[2006]: I0714 22:13:45.029627 2006 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.029610601 podStartE2EDuration="1.029610601s" podCreationTimestamp="2025-07-14 22:13:44 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 22:13:45.02113926 +0000 UTC m=+1.136312905" watchObservedRunningTime="2025-07-14 22:13:45.029610601 +0000 UTC m=+1.144784246" Jul 14 22:13:45.040192 kubelet[2006]: I0714 22:13:45.040128 2006 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=2.040116121 podStartE2EDuration="2.040116121s" podCreationTimestamp="2025-07-14 22:13:43 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 22:13:45.030333496 +0000 UTC m=+1.145507101" watchObservedRunningTime="2025-07-14 22:13:45.040116121 +0000 UTC m=+1.155289766" Jul 14 22:13:45.570000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=5201 scontext=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 14 22:13:45.570000 audit[1881]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000568f00 a2=fc6 a3=0 items=0 ppid=1708 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 key=(null) Jul 14 22:13:45.570000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:13:45.990053 kubelet[2006]: E0714 22:13:45.990003 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:45.990754 kubelet[2006]: E0714 22:13:45.990709 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:46.319000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:13:46.319000 audit[1881]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40003eed60 a2=fc6 a3=0 items=0 ppid=1708 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 key=(null) Jul 14 22:13:46.319000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:13:46.320000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:13:46.320000 audit[1881]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40009b6000 a2=fc6 a3=0 items=0 ppid=1708 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 key=(null) Jul 14 22:13:46.320000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:13:46.321000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:13:46.320000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:13:46.320000 audit[1881]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40004146e0 a2=fc6 a3=0 items=0 ppid=1708 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 key=(null) Jul 14 22:13:46.321000 audit[1881]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000fe1be0 a2=fc6 a3=0 items=0 ppid=1708 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 key=(null) Jul 14 22:13:46.321000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:13:46.320000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:13:46.991713 kubelet[2006]: E0714 22:13:46.991684 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:46.992111 kubelet[2006]: E0714 22:13:46.991804 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:48.440698 kubelet[2006]: I0714 22:13:48.440670 2006 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 14 22:13:48.441405 env[1215]: time="2025-07-14T22:13:48.441371447Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 14 22:13:48.441692 kubelet[2006]: I0714 22:13:48.441666 2006 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 14 22:13:49.497379 systemd[1]: Created slice kubepods-besteffort-pod6303dc47_e092_404c_b05e_3aac24997323.slice. Jul 14 22:13:49.498656 kubelet[2006]: W0714 22:13:49.498626 2006 helpers.go:245] readString: Failed to read "/sys/fs/cgroup/kubepods.slice/kubepods-besteffort.slice/kubepods-besteffort-pod6303dc47_e092_404c_b05e_3aac24997323.slice/cpuset.cpus.effective": read /sys/fs/cgroup/kubepods.slice/kubepods-besteffort.slice/kubepods-besteffort-pod6303dc47_e092_404c_b05e_3aac24997323.slice/cpuset.cpus.effective: no such device Jul 14 22:13:49.596743 kubelet[2006]: I0714 22:13:49.596689 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/6303dc47-e092-404c-b05e-3aac24997323-xtables-lock\") pod \"kube-proxy-4sshf\" (UID: \"6303dc47-e092-404c-b05e-3aac24997323\") " pod="kube-system/kube-proxy-4sshf" Jul 14 22:13:49.596743 kubelet[2006]: I0714 22:13:49.596748 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/6303dc47-e092-404c-b05e-3aac24997323-lib-modules\") pod \"kube-proxy-4sshf\" (UID: \"6303dc47-e092-404c-b05e-3aac24997323\") " pod="kube-system/kube-proxy-4sshf" Jul 14 22:13:49.596927 kubelet[2006]: I0714 22:13:49.596768 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-prxmv\" (UniqueName: \"kubernetes.io/projected/6303dc47-e092-404c-b05e-3aac24997323-kube-api-access-prxmv\") pod \"kube-proxy-4sshf\" (UID: \"6303dc47-e092-404c-b05e-3aac24997323\") " pod="kube-system/kube-proxy-4sshf" Jul 14 22:13:49.596927 kubelet[2006]: I0714 22:13:49.596803 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/6303dc47-e092-404c-b05e-3aac24997323-kube-proxy\") pod \"kube-proxy-4sshf\" (UID: \"6303dc47-e092-404c-b05e-3aac24997323\") " pod="kube-system/kube-proxy-4sshf" Jul 14 22:13:49.705698 kubelet[2006]: I0714 22:13:49.705659 2006 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 14 22:13:49.808411 kubelet[2006]: E0714 22:13:49.808300 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:49.809111 env[1215]: time="2025-07-14T22:13:49.809061039Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-4sshf,Uid:6303dc47-e092-404c-b05e-3aac24997323,Namespace:kube-system,Attempt:0,}" Jul 14 22:13:49.827050 env[1215]: time="2025-07-14T22:13:49.826969893Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:13:49.827050 env[1215]: time="2025-07-14T22:13:49.827009580Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:13:49.827050 env[1215]: time="2025-07-14T22:13:49.827020342Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:13:49.827314 env[1215]: time="2025-07-14T22:13:49.827203652Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/212db9a5883a84b32d2e20848075fba98e6892ffd5ce5deb8766f4675f8006c2 pid=2062 runtime=io.containerd.runc.v2 Jul 14 22:13:49.847050 systemd[1]: run-containerd-runc-k8s.io-212db9a5883a84b32d2e20848075fba98e6892ffd5ce5deb8766f4675f8006c2-runc.1y4sWu.mount: Deactivated successfully. Jul 14 22:13:49.848703 systemd[1]: Started cri-containerd-212db9a5883a84b32d2e20848075fba98e6892ffd5ce5deb8766f4675f8006c2.scope. Jul 14 22:13:49.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.880269 kernel: kauditd_printk_skb: 287 callbacks suppressed Jul 14 22:13:49.880332 kernel: audit: type=1400 audit(1752531229.878:818): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.885339 kernel: audit: type=1400 audit(1752531229.879:819): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.885412 kernel: audit: type=1400 audit(1752531229.879:820): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.890423 kernel: audit: type=1400 audit(1752531229.879:821): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.890483 kernel: audit: type=1400 audit(1752531229.879:822): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.895550 kernel: audit: type=1400 audit(1752531229.879:823): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.895801 kernel: audit: type=1400 audit(1752531229.879:824): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.900917 kernel: audit: type=1400 audit(1752531229.879:825): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.903943 kernel: audit: type=1400 audit(1752531229.879:826): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.904010 kernel: audit: type=1400 audit(1752531229.882:827): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.882000 audit: BPF prog-id=106 op=LOAD Jul 14 22:13:49.882000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.882000 audit[2072]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=2062 pid=2072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:49.882000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231326462396135383833613834623332643265323038343830373566 Jul 14 22:13:49.882000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.882000 audit[2072]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2062 pid=2072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:49.882000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231326462396135383833613834623332643265323038343830373566 Jul 14 22:13:49.882000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.882000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.882000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.882000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.882000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.882000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.882000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.882000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.882000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.882000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.882000 audit: BPF prog-id=107 op=LOAD Jul 14 22:13:49.882000 audit[2072]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2062 pid=2072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:49.882000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231326462396135383833613834623332643265323038343830373566 Jul 14 22:13:49.884000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.884000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.884000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.884000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.884000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.884000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.884000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.884000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.884000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.884000 audit: BPF prog-id=108 op=LOAD Jul 14 22:13:49.884000 audit[2072]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2062 pid=2072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:49.884000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231326462396135383833613834623332643265323038343830373566 Jul 14 22:13:49.887000 audit: BPF prog-id=108 op=UNLOAD Jul 14 22:13:49.887000 audit: BPF prog-id=107 op=UNLOAD Jul 14 22:13:49.887000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.887000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.887000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.887000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.887000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.887000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.887000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.887000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.887000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.887000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.887000 audit: BPF prog-id=109 op=LOAD Jul 14 22:13:49.887000 audit[2072]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2062 pid=2072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:49.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231326462396135383833613834623332643265323038343830373566 Jul 14 22:13:49.910273 env[1215]: time="2025-07-14T22:13:49.910228377Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-4sshf,Uid:6303dc47-e092-404c-b05e-3aac24997323,Namespace:kube-system,Attempt:0,} returns sandbox id \"212db9a5883a84b32d2e20848075fba98e6892ffd5ce5deb8766f4675f8006c2\"" Jul 14 22:13:49.910916 kubelet[2006]: E0714 22:13:49.910894 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:49.915493 env[1215]: time="2025-07-14T22:13:49.915453753Z" level=info msg="CreateContainer within sandbox \"212db9a5883a84b32d2e20848075fba98e6892ffd5ce5deb8766f4675f8006c2\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 14 22:13:49.927777 env[1215]: time="2025-07-14T22:13:49.927734645Z" level=info msg="CreateContainer within sandbox \"212db9a5883a84b32d2e20848075fba98e6892ffd5ce5deb8766f4675f8006c2\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"37ef07cfd6d327ed95d3ed2265e350b6560552bbcb3d3c512a8f3b81932a3b29\"" Jul 14 22:13:49.929501 env[1215]: time="2025-07-14T22:13:49.928893515Z" level=info msg="StartContainer for \"37ef07cfd6d327ed95d3ed2265e350b6560552bbcb3d3c512a8f3b81932a3b29\"" Jul 14 22:13:49.943649 systemd[1]: Started cri-containerd-37ef07cfd6d327ed95d3ed2265e350b6560552bbcb3d3c512a8f3b81932a3b29.scope. Jul 14 22:13:49.965000 audit[2102]: AVC avc: denied { perfmon } for pid=2102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.965000 audit[2102]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2062 pid=2102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:49.965000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337656630376366643664333237656439356433656432323635653335 Jul 14 22:13:49.965000 audit[2102]: AVC avc: denied { bpf } for pid=2102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.965000 audit[2102]: AVC avc: denied { bpf } for pid=2102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.965000 audit[2102]: AVC avc: denied { bpf } for pid=2102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.965000 audit[2102]: AVC avc: denied { perfmon } for pid=2102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.965000 audit[2102]: AVC avc: denied { perfmon } for pid=2102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.965000 audit[2102]: AVC avc: denied { perfmon } for pid=2102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.965000 audit[2102]: AVC avc: denied { perfmon } for pid=2102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.965000 audit[2102]: AVC avc: denied { perfmon } for pid=2102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.965000 audit[2102]: AVC avc: denied { bpf } for pid=2102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.965000 audit[2102]: AVC avc: denied { bpf } for pid=2102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.965000 audit: BPF prog-id=110 op=LOAD Jul 14 22:13:49.965000 audit[2102]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2062 pid=2102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:49.965000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337656630376366643664333237656439356433656432323635653335 Jul 14 22:13:49.966000 audit[2102]: AVC avc: denied { bpf } for pid=2102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.966000 audit[2102]: AVC avc: denied { bpf } for pid=2102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.966000 audit[2102]: AVC avc: denied { perfmon } for pid=2102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.966000 audit[2102]: AVC avc: denied { perfmon } for pid=2102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.966000 audit[2102]: AVC avc: denied { perfmon } for pid=2102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.966000 audit[2102]: AVC avc: denied { perfmon } for pid=2102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.966000 audit[2102]: AVC avc: denied { perfmon } for pid=2102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.966000 audit[2102]: AVC avc: denied { bpf } for pid=2102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.966000 audit[2102]: AVC avc: denied { bpf } for pid=2102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.966000 audit: BPF prog-id=111 op=LOAD Jul 14 22:13:49.966000 audit[2102]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2062 pid=2102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:49.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337656630376366643664333237656439356433656432323635653335 Jul 14 22:13:49.967000 audit: BPF prog-id=111 op=UNLOAD Jul 14 22:13:49.967000 audit: BPF prog-id=110 op=UNLOAD Jul 14 22:13:49.967000 audit[2102]: AVC avc: denied { bpf } for pid=2102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.967000 audit[2102]: AVC avc: denied { bpf } for pid=2102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.967000 audit[2102]: AVC avc: denied { bpf } for pid=2102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.967000 audit[2102]: AVC avc: denied { perfmon } for pid=2102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.967000 audit[2102]: AVC avc: denied { perfmon } for pid=2102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.967000 audit[2102]: AVC avc: denied { perfmon } for pid=2102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.967000 audit[2102]: AVC avc: denied { perfmon } for pid=2102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.967000 audit[2102]: AVC avc: denied { perfmon } for pid=2102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.967000 audit[2102]: AVC avc: denied { bpf } for pid=2102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.967000 audit[2102]: AVC avc: denied { bpf } for pid=2102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:49.967000 audit: BPF prog-id=112 op=LOAD Jul 14 22:13:49.967000 audit[2102]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2062 pid=2102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:49.967000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337656630376366643664333237656439356433656432323635653335 Jul 14 22:13:49.983893 env[1215]: time="2025-07-14T22:13:49.983850561Z" level=info msg="StartContainer for \"37ef07cfd6d327ed95d3ed2265e350b6560552bbcb3d3c512a8f3b81932a3b29\" returns successfully" Jul 14 22:13:49.997250 kubelet[2006]: E0714 22:13:49.997014 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:50.179000 audit[2164]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2164 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:50.179000 audit[2164]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd51c2960 a2=0 a3=1 items=0 ppid=2113 pid=2164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.179000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 14 22:13:50.180000 audit[2167]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2167 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:50.180000 audit[2167]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdb46f870 a2=0 a3=1 items=0 ppid=2113 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.180000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 14 22:13:50.182000 audit[2169]: NETFILTER_CFG table=filter:40 family=2 entries=1 op=nft_register_chain pid=2169 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:50.182000 audit[2169]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff7479190 a2=0 a3=1 items=0 ppid=2113 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.182000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 14 22:13:50.182000 audit[2165]: NETFILTER_CFG table=mangle:41 family=10 entries=1 op=nft_register_chain pid=2165 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:13:50.182000 audit[2165]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffd040ae0 a2=0 a3=1 items=0 ppid=2113 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.182000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 14 22:13:50.183000 audit[2170]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2170 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:13:50.183000 audit[2170]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffeb3664e0 a2=0 a3=1 items=0 ppid=2113 pid=2170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.183000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 14 22:13:50.184000 audit[2171]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2171 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:13:50.184000 audit[2171]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc00aa140 a2=0 a3=1 items=0 ppid=2113 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.184000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 14 22:13:50.287000 audit[2173]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:50.287000 audit[2173]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffffebd52a0 a2=0 a3=1 items=0 ppid=2113 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.287000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 14 22:13:50.292000 audit[2175]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2175 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:50.292000 audit[2175]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffff99a1260 a2=0 a3=1 items=0 ppid=2113 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.292000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 14 22:13:50.296000 audit[2178]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2178 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:50.296000 audit[2178]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffeaa0d960 a2=0 a3=1 items=0 ppid=2113 pid=2178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.296000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 14 22:13:50.297000 audit[2179]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2179 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:50.297000 audit[2179]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd71bdcd0 a2=0 a3=1 items=0 ppid=2113 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.297000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 14 22:13:50.300000 audit[2181]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2181 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:50.300000 audit[2181]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd6936770 a2=0 a3=1 items=0 ppid=2113 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.300000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 14 22:13:50.301000 audit[2182]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2182 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:50.301000 audit[2182]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd3b41240 a2=0 a3=1 items=0 ppid=2113 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.301000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 14 22:13:50.303000 audit[2184]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2184 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:50.303000 audit[2184]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffcde64f00 a2=0 a3=1 items=0 ppid=2113 pid=2184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.303000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 14 22:13:50.307000 audit[2187]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2187 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:50.307000 audit[2187]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffdd2b97b0 a2=0 a3=1 items=0 ppid=2113 pid=2187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.307000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 14 22:13:50.308000 audit[2188]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2188 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:50.308000 audit[2188]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd5bc76a0 a2=0 a3=1 items=0 ppid=2113 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.308000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 14 22:13:50.311000 audit[2190]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2190 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:50.311000 audit[2190]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcefecd70 a2=0 a3=1 items=0 ppid=2113 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.311000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 14 22:13:50.312000 audit[2191]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2191 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:50.312000 audit[2191]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd34a75c0 a2=0 a3=1 items=0 ppid=2113 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.312000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 14 22:13:50.315000 audit[2193]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2193 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:50.315000 audit[2193]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff41ad760 a2=0 a3=1 items=0 ppid=2113 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.315000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 14 22:13:50.318000 audit[2196]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2196 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:50.318000 audit[2196]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe431aa30 a2=0 a3=1 items=0 ppid=2113 pid=2196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.318000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 14 22:13:50.322000 audit[2199]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2199 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:50.322000 audit[2199]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffd1283e0 a2=0 a3=1 items=0 ppid=2113 pid=2199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.322000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 14 22:13:50.323000 audit[2200]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2200 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:50.323000 audit[2200]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffea4b58d0 a2=0 a3=1 items=0 ppid=2113 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.323000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 14 22:13:50.325000 audit[2202]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2202 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:50.325000 audit[2202]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffe3132590 a2=0 a3=1 items=0 ppid=2113 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.325000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 14 22:13:50.329000 audit[2205]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2205 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:50.329000 audit[2205]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff490c7b0 a2=0 a3=1 items=0 ppid=2113 pid=2205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.329000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 14 22:13:50.329000 audit[2206]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2206 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:50.329000 audit[2206]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffb0fb340 a2=0 a3=1 items=0 ppid=2113 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.329000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 14 22:13:50.332000 audit[2208]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2208 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:13:50.332000 audit[2208]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffd1e7ac50 a2=0 a3=1 items=0 ppid=2113 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.332000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 14 22:13:50.358000 audit[2214]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2214 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:13:50.358000 audit[2214]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffc5739d60 a2=0 a3=1 items=0 ppid=2113 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.358000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:13:50.371000 audit[2214]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2214 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:13:50.371000 audit[2214]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffc5739d60 a2=0 a3=1 items=0 ppid=2113 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.371000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:13:50.372000 audit[2219]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2219 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:13:50.372000 audit[2219]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffc47f3810 a2=0 a3=1 items=0 ppid=2113 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.372000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 14 22:13:50.375000 audit[2221]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2221 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:13:50.375000 audit[2221]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffe8d5e270 a2=0 a3=1 items=0 ppid=2113 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.375000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 14 22:13:50.379000 audit[2224]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2224 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:13:50.379000 audit[2224]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffe4752e80 a2=0 a3=1 items=0 ppid=2113 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.379000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 14 22:13:50.380000 audit[2225]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2225 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:13:50.380000 audit[2225]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffeb9211e0 a2=0 a3=1 items=0 ppid=2113 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.380000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 14 22:13:50.383000 audit[2227]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2227 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:13:50.383000 audit[2227]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd0de0690 a2=0 a3=1 items=0 ppid=2113 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.383000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 14 22:13:50.384000 audit[2228]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2228 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:13:50.384000 audit[2228]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe39999b0 a2=0 a3=1 items=0 ppid=2113 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.384000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 14 22:13:50.386000 audit[2230]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2230 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:13:50.386000 audit[2230]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd8af2840 a2=0 a3=1 items=0 ppid=2113 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.386000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 14 22:13:50.389000 audit[2233]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2233 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:13:50.389000 audit[2233]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffdc269ca0 a2=0 a3=1 items=0 ppid=2113 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.389000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 14 22:13:50.390000 audit[2234]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2234 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:13:50.390000 audit[2234]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcfd71120 a2=0 a3=1 items=0 ppid=2113 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.390000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 14 22:13:50.396000 audit[2236]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2236 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:13:50.396000 audit[2236]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd2595420 a2=0 a3=1 items=0 ppid=2113 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.396000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 14 22:13:50.397000 audit[2237]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:13:50.397000 audit[2237]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe8acb5b0 a2=0 a3=1 items=0 ppid=2113 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.397000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 14 22:13:50.400000 audit[2239]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2239 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:13:50.400000 audit[2239]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff72e0d70 a2=0 a3=1 items=0 ppid=2113 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.400000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 14 22:13:50.403000 audit[2242]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2242 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:13:50.403000 audit[2242]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffec6c3210 a2=0 a3=1 items=0 ppid=2113 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.403000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 14 22:13:50.413000 audit[2245]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2245 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:13:50.413000 audit[2245]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd3fb6450 a2=0 a3=1 items=0 ppid=2113 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.413000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 14 22:13:50.415000 audit[2246]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2246 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:13:50.415000 audit[2246]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe3eb2690 a2=0 a3=1 items=0 ppid=2113 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.415000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 14 22:13:50.417000 audit[2248]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2248 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:13:50.417000 audit[2248]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffe3ddf380 a2=0 a3=1 items=0 ppid=2113 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.417000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 14 22:13:50.422000 audit[2251]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2251 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:13:50.422000 audit[2251]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffdfec54d0 a2=0 a3=1 items=0 ppid=2113 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.422000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 14 22:13:50.427000 audit[2252]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2252 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:13:50.427000 audit[2252]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe5535150 a2=0 a3=1 items=0 ppid=2113 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.427000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 14 22:13:50.430000 audit[2254]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2254 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:13:50.430000 audit[2254]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffd6e11450 a2=0 a3=1 items=0 ppid=2113 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.430000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 14 22:13:50.436000 audit[2255]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2255 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:13:50.436000 audit[2255]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffea221810 a2=0 a3=1 items=0 ppid=2113 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.436000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 14 22:13:50.439000 audit[2257]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2257 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:13:50.439000 audit[2257]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffffe7c9d30 a2=0 a3=1 items=0 ppid=2113 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.439000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 14 22:13:50.442000 audit[2260]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2260 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:13:50.442000 audit[2260]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc3d2ba80 a2=0 a3=1 items=0 ppid=2113 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.442000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 14 22:13:50.448000 audit[2262]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2262 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 14 22:13:50.448000 audit[2262]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffd0ab5890 a2=0 a3=1 items=0 ppid=2113 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.448000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:13:50.448000 audit[2262]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2262 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 14 22:13:50.448000 audit[2262]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffd0ab5890 a2=0 a3=1 items=0 ppid=2113 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:50.448000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:13:54.390479 kubelet[2006]: E0714 22:13:54.390442 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:54.407768 kubelet[2006]: I0714 22:13:54.407689 2006 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-4sshf" podStartSLOduration=5.407674064 podStartE2EDuration="5.407674064s" podCreationTimestamp="2025-07-14 22:13:49 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 22:13:50.006923631 +0000 UTC m=+6.122097276" watchObservedRunningTime="2025-07-14 22:13:54.407674064 +0000 UTC m=+10.522847709" Jul 14 22:13:54.427342 kubelet[2006]: E0714 22:13:54.426997 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:55.005457 kubelet[2006]: E0714 22:13:55.005238 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:55.005457 kubelet[2006]: E0714 22:13:55.005298 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:55.196279 systemd[1]: Created slice kubepods-besteffort-podfa2d3844_ab7e_4cb3_b4fb_a8dd227c5e74.slice. Jul 14 22:13:55.236353 kubelet[2006]: I0714 22:13:55.236285 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vxph4\" (UniqueName: \"kubernetes.io/projected/fa2d3844-ab7e-4cb3-b4fb-a8dd227c5e74-kube-api-access-vxph4\") pod \"tigera-operator-747864d56d-45krp\" (UID: \"fa2d3844-ab7e-4cb3-b4fb-a8dd227c5e74\") " pod="tigera-operator/tigera-operator-747864d56d-45krp" Jul 14 22:13:55.236353 kubelet[2006]: I0714 22:13:55.236345 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/fa2d3844-ab7e-4cb3-b4fb-a8dd227c5e74-var-lib-calico\") pod \"tigera-operator-747864d56d-45krp\" (UID: \"fa2d3844-ab7e-4cb3-b4fb-a8dd227c5e74\") " pod="tigera-operator/tigera-operator-747864d56d-45krp" Jul 14 22:13:55.500049 env[1215]: time="2025-07-14T22:13:55.500008328Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-45krp,Uid:fa2d3844-ab7e-4cb3-b4fb-a8dd227c5e74,Namespace:tigera-operator,Attempt:0,}" Jul 14 22:13:55.514290 env[1215]: time="2025-07-14T22:13:55.514215584Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:13:55.514467 env[1215]: time="2025-07-14T22:13:55.514261311Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:13:55.514467 env[1215]: time="2025-07-14T22:13:55.514272152Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:13:55.514545 env[1215]: time="2025-07-14T22:13:55.514451057Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c75ad286ba533563e1317f84033584f402818fbf6b0c94c71fdd11343a58a7e9 pid=2284 runtime=io.containerd.runc.v2 Jul 14 22:13:55.531859 systemd[1]: Started cri-containerd-c75ad286ba533563e1317f84033584f402818fbf6b0c94c71fdd11343a58a7e9.scope. Jul 14 22:13:55.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.554978 kernel: kauditd_printk_skb: 243 callbacks suppressed Jul 14 22:13:55.555057 kernel: audit: type=1400 audit(1752531235.553:893): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.559764 kernel: audit: type=1400 audit(1752531235.553:894): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.559869 kernel: audit: type=1400 audit(1752531235.553:895): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.564435 kernel: audit: type=1400 audit(1752531235.553:896): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.564519 kernel: audit: type=1400 audit(1752531235.553:897): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.566937 kernel: audit: type=1400 audit(1752531235.553:898): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.571762 kernel: audit: type=1400 audit(1752531235.553:899): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.571993 kernel: audit: type=1400 audit(1752531235.553:900): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.579784 kernel: audit: type=1400 audit(1752531235.553:901): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.579880 kernel: audit: type=1400 audit(1752531235.553:902): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.553000 audit: BPF prog-id=113 op=LOAD Jul 14 22:13:55.553000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.553000 audit[2294]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2284 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:55.553000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337356164323836626135333335363365313331376638343033333538 Jul 14 22:13:55.553000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.553000 audit[2294]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2284 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:55.553000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337356164323836626135333335363365313331376638343033333538 Jul 14 22:13:55.553000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.553000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.553000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.553000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.553000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.553000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.553000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.553000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.553000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.553000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.553000 audit: BPF prog-id=114 op=LOAD Jul 14 22:13:55.553000 audit[2294]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2284 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:55.553000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337356164323836626135333335363365313331376638343033333538 Jul 14 22:13:55.554000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.554000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.554000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.554000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.554000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.554000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.554000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.554000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.554000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.554000 audit: BPF prog-id=115 op=LOAD Jul 14 22:13:55.554000 audit[2294]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2284 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:55.554000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337356164323836626135333335363365313331376638343033333538 Jul 14 22:13:55.556000 audit: BPF prog-id=115 op=UNLOAD Jul 14 22:13:55.556000 audit: BPF prog-id=114 op=UNLOAD Jul 14 22:13:55.556000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.556000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.556000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.556000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.556000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.556000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.556000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.556000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.556000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.556000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:55.556000 audit: BPF prog-id=116 op=LOAD Jul 14 22:13:55.556000 audit[2294]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2284 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:55.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337356164323836626135333335363365313331376638343033333538 Jul 14 22:13:55.591532 env[1215]: time="2025-07-14T22:13:55.591469128Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-45krp,Uid:fa2d3844-ab7e-4cb3-b4fb-a8dd227c5e74,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"c75ad286ba533563e1317f84033584f402818fbf6b0c94c71fdd11343a58a7e9\"" Jul 14 22:13:55.593411 env[1215]: time="2025-07-14T22:13:55.593260617Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 14 22:13:56.336778 kubelet[2006]: E0714 22:13:56.336669 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:56.349100 systemd[1]: run-containerd-runc-k8s.io-c75ad286ba533563e1317f84033584f402818fbf6b0c94c71fdd11343a58a7e9-runc.cEMoMe.mount: Deactivated successfully. Jul 14 22:13:56.510061 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1262939060.mount: Deactivated successfully. Jul 14 22:13:57.009288 kubelet[2006]: E0714 22:13:57.009239 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:13:57.650880 env[1215]: time="2025-07-14T22:13:57.650826519Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:57.652271 env[1215]: time="2025-07-14T22:13:57.652236426Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:57.653409 env[1215]: time="2025-07-14T22:13:57.653379658Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:57.655068 env[1215]: time="2025-07-14T22:13:57.655033598Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:13:57.656420 env[1215]: time="2025-07-14T22:13:57.656378656Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0\"" Jul 14 22:13:57.662409 env[1215]: time="2025-07-14T22:13:57.662359610Z" level=info msg="CreateContainer within sandbox \"c75ad286ba533563e1317f84033584f402818fbf6b0c94c71fdd11343a58a7e9\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 14 22:13:57.674325 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3585875525.mount: Deactivated successfully. Jul 14 22:13:57.677053 env[1215]: time="2025-07-14T22:13:57.677005234Z" level=info msg="CreateContainer within sandbox \"c75ad286ba533563e1317f84033584f402818fbf6b0c94c71fdd11343a58a7e9\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"35515efce391dec7aa7564e9c95c0606da55eb3a9d4138b8f0ef608138faa7f7\"" Jul 14 22:13:57.679102 env[1215]: time="2025-07-14T22:13:57.677708247Z" level=info msg="StartContainer for \"35515efce391dec7aa7564e9c95c0606da55eb3a9d4138b8f0ef608138faa7f7\"" Jul 14 22:13:57.693099 systemd[1]: Started cri-containerd-35515efce391dec7aa7564e9c95c0606da55eb3a9d4138b8f0ef608138faa7f7.scope. Jul 14 22:13:57.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit: BPF prog-id=117 op=LOAD Jul 14 22:13:57.719000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit[2323]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2284 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:57.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335353135656663653339316465633761613735363465396339356330 Jul 14 22:13:57.719000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit[2323]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2284 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:57.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335353135656663653339316465633761613735363465396339356330 Jul 14 22:13:57.719000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit: BPF prog-id=118 op=LOAD Jul 14 22:13:57.719000 audit[2323]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2284 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:57.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335353135656663653339316465633761613735363465396339356330 Jul 14 22:13:57.719000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.719000 audit: BPF prog-id=119 op=LOAD Jul 14 22:13:57.719000 audit[2323]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2284 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:57.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335353135656663653339316465633761613735363465396339356330 Jul 14 22:13:57.719000 audit: BPF prog-id=119 op=UNLOAD Jul 14 22:13:57.720000 audit: BPF prog-id=118 op=UNLOAD Jul 14 22:13:57.720000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.720000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.720000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.720000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.720000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.720000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.720000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.720000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.720000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.720000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:13:57.720000 audit: BPF prog-id=120 op=LOAD Jul 14 22:13:57.720000 audit[2323]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2284 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:13:57.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335353135656663653339316465633761613735363465396339356330 Jul 14 22:13:57.732901 env[1215]: time="2025-07-14T22:13:57.732833843Z" level=info msg="StartContainer for \"35515efce391dec7aa7564e9c95c0606da55eb3a9d4138b8f0ef608138faa7f7\" returns successfully" Jul 14 22:13:58.021328 kubelet[2006]: I0714 22:13:58.021252 2006 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-747864d56d-45krp" podStartSLOduration=0.956893779 podStartE2EDuration="3.021236662s" podCreationTimestamp="2025-07-14 22:13:55 +0000 UTC" firstStartedPulling="2025-07-14 22:13:55.592911489 +0000 UTC m=+11.708085134" lastFinishedPulling="2025-07-14 22:13:57.657254412 +0000 UTC m=+13.772428017" observedRunningTime="2025-07-14 22:13:58.021038596 +0000 UTC m=+14.136212241" watchObservedRunningTime="2025-07-14 22:13:58.021236662 +0000 UTC m=+14.136410307" Jul 14 22:14:03.129940 sudo[1355]: pam_unix(sudo:session): session closed for user root Jul 14 22:14:03.152027 kernel: kauditd_printk_skb: 104 callbacks suppressed Jul 14 22:14:03.152088 kernel: audit: type=1106 audit(1752531243.129:929): pid=1355 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:14:03.152117 kernel: audit: type=1104 audit(1752531243.129:930): pid=1355 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:14:03.152149 kernel: audit: type=1106 audit(1752531243.148:931): pid=1351 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:14:03.129000 audit[1355]: USER_END pid=1355 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:14:03.129000 audit[1355]: CRED_DISP pid=1355 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:14:03.148000 audit[1351]: USER_END pid=1351 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:14:03.145124 sshd[1351]: pam_unix(sshd:session): session closed for user core Jul 14 22:14:03.157853 systemd[1]: sshd@6-10.0.0.132:22-10.0.0.1:52768.service: Deactivated successfully. Jul 14 22:14:03.158551 systemd[1]: session-7.scope: Deactivated successfully. Jul 14 22:14:03.158704 systemd[1]: session-7.scope: Consumed 8.171s CPU time. Jul 14 22:14:03.148000 audit[1351]: CRED_DISP pid=1351 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:14:03.164621 kernel: audit: type=1104 audit(1752531243.148:932): pid=1351 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:14:03.164708 kernel: audit: type=1131 audit(1752531243.157:933): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.132:22-10.0.0.1:52768 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:14:03.157000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.132:22-10.0.0.1:52768 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:14:03.167428 systemd-logind[1204]: Session 7 logged out. Waiting for processes to exit. Jul 14 22:14:03.168174 systemd-logind[1204]: Removed session 7. Jul 14 22:14:04.468000 audit[2411]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2411 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:04.468000 audit[2411]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=fffffef6d430 a2=0 a3=1 items=0 ppid=2113 pid=2411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:04.476561 kernel: audit: type=1325 audit(1752531244.468:934): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2411 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:04.476690 kernel: audit: type=1300 audit(1752531244.468:934): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=fffffef6d430 a2=0 a3=1 items=0 ppid=2113 pid=2411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:04.476721 kernel: audit: type=1327 audit(1752531244.468:934): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:04.468000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:04.483000 audit[2411]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2411 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:04.486747 kernel: audit: type=1325 audit(1752531244.483:935): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2411 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:04.483000 audit[2411]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffffef6d430 a2=0 a3=1 items=0 ppid=2113 pid=2411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:04.492751 kernel: audit: type=1300 audit(1752531244.483:935): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffffef6d430 a2=0 a3=1 items=0 ppid=2113 pid=2411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:04.483000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:04.510000 audit[2413]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2413 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:04.510000 audit[2413]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=fffff3ad70a0 a2=0 a3=1 items=0 ppid=2113 pid=2413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:04.510000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:04.516000 audit[2413]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2413 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:04.516000 audit[2413]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff3ad70a0 a2=0 a3=1 items=0 ppid=2113 pid=2413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:04.516000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:07.728000 audit[2415]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2415 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:07.728000 audit[2415]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffffbdc1650 a2=0 a3=1 items=0 ppid=2113 pid=2415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:07.728000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:07.736000 audit[2415]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2415 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:07.736000 audit[2415]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffffbdc1650 a2=0 a3=1 items=0 ppid=2113 pid=2415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:07.736000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:07.788000 audit[2418]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=2418 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:07.788000 audit[2418]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffe0c6b080 a2=0 a3=1 items=0 ppid=2113 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:07.788000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:07.793000 audit[2418]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2418 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:07.793000 audit[2418]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe0c6b080 a2=0 a3=1 items=0 ppid=2113 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:07.793000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:08.089591 systemd[1]: Created slice kubepods-besteffort-pod4977d077_9477_4c62_9f71_69efd55d2d07.slice. Jul 14 22:14:08.130780 kubelet[2006]: I0714 22:14:08.130716 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/4977d077-9477-4c62-9f71-69efd55d2d07-tigera-ca-bundle\") pod \"calico-typha-6799d76845-mj9b2\" (UID: \"4977d077-9477-4c62-9f71-69efd55d2d07\") " pod="calico-system/calico-typha-6799d76845-mj9b2" Jul 14 22:14:08.130780 kubelet[2006]: I0714 22:14:08.130780 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xxk2r\" (UniqueName: \"kubernetes.io/projected/4977d077-9477-4c62-9f71-69efd55d2d07-kube-api-access-xxk2r\") pod \"calico-typha-6799d76845-mj9b2\" (UID: \"4977d077-9477-4c62-9f71-69efd55d2d07\") " pod="calico-system/calico-typha-6799d76845-mj9b2" Jul 14 22:14:08.131163 kubelet[2006]: I0714 22:14:08.130800 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/4977d077-9477-4c62-9f71-69efd55d2d07-typha-certs\") pod \"calico-typha-6799d76845-mj9b2\" (UID: \"4977d077-9477-4c62-9f71-69efd55d2d07\") " pod="calico-system/calico-typha-6799d76845-mj9b2" Jul 14 22:14:08.393055 kubelet[2006]: E0714 22:14:08.392962 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:14:08.393942 env[1215]: time="2025-07-14T22:14:08.393865304Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6799d76845-mj9b2,Uid:4977d077-9477-4c62-9f71-69efd55d2d07,Namespace:calico-system,Attempt:0,}" Jul 14 22:14:08.410785 env[1215]: time="2025-07-14T22:14:08.410694024Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:14:08.410785 env[1215]: time="2025-07-14T22:14:08.410766832Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:14:08.410785 env[1215]: time="2025-07-14T22:14:08.410778273Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:14:08.411035 env[1215]: time="2025-07-14T22:14:08.411003578Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/17a09aaf373012a9272c2431178a272128d484b6eb3a9a4d922c3fe336dd250c pid=2427 runtime=io.containerd.runc.v2 Jul 14 22:14:08.431091 systemd[1]: Started cri-containerd-17a09aaf373012a9272c2431178a272128d484b6eb3a9a4d922c3fe336dd250c.scope. Jul 14 22:14:08.487000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.488915 kernel: kauditd_printk_skb: 19 callbacks suppressed Jul 14 22:14:08.488977 kernel: audit: type=1400 audit(1752531248.487:942): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.494417 kernel: audit: type=1400 audit(1752531248.487:943): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.494498 kernel: audit: type=1400 audit(1752531248.487:944): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.501421 kernel: audit: type=1400 audit(1752531248.487:945): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.501484 kernel: audit: type=1400 audit(1752531248.487:946): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.507026 kernel: audit: type=1400 audit(1752531248.487:947): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.509869 kernel: audit: type=1400 audit(1752531248.487:948): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.513280 kernel: audit: type=1400 audit(1752531248.487:949): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.516158 kernel: audit: type=1400 audit(1752531248.487:950): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.518703 kernel: audit: type=1400 audit(1752531248.487:951): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit: BPF prog-id=121 op=LOAD Jul 14 22:14:08.487000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit[2438]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2427 pid=2438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:08.487000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137613039616166333733303132613932373263323433313137386132 Jul 14 22:14:08.487000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit[2438]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2427 pid=2438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:08.487000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137613039616166333733303132613932373263323433313137386132 Jul 14 22:14:08.487000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit: BPF prog-id=122 op=LOAD Jul 14 22:14:08.487000 audit[2438]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2427 pid=2438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:08.487000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137613039616166333733303132613932373263323433313137386132 Jul 14 22:14:08.487000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.487000 audit: BPF prog-id=123 op=LOAD Jul 14 22:14:08.487000 audit[2438]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2427 pid=2438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:08.487000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137613039616166333733303132613932373263323433313137386132 Jul 14 22:14:08.493000 audit: BPF prog-id=123 op=UNLOAD Jul 14 22:14:08.493000 audit: BPF prog-id=122 op=UNLOAD Jul 14 22:14:08.493000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.493000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.493000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.493000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.493000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.493000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.493000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.493000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.493000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.493000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.493000 audit: BPF prog-id=124 op=LOAD Jul 14 22:14:08.493000 audit[2438]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2427 pid=2438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:08.493000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137613039616166333733303132613932373263323433313137386132 Jul 14 22:14:08.530111 systemd[1]: Created slice kubepods-besteffort-pod408dbf04_f002_4186_8204_74b44204ae18.slice. Jul 14 22:14:08.533525 kubelet[2006]: I0714 22:14:08.533492 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-d8xx6\" (UniqueName: \"kubernetes.io/projected/408dbf04-f002-4186-8204-74b44204ae18-kube-api-access-d8xx6\") pod \"calico-node-zlqsg\" (UID: \"408dbf04-f002-4186-8204-74b44204ae18\") " pod="calico-system/calico-node-zlqsg" Jul 14 22:14:08.533662 kubelet[2006]: I0714 22:14:08.533645 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/408dbf04-f002-4186-8204-74b44204ae18-cni-log-dir\") pod \"calico-node-zlqsg\" (UID: \"408dbf04-f002-4186-8204-74b44204ae18\") " pod="calico-system/calico-node-zlqsg" Jul 14 22:14:08.533792 kubelet[2006]: I0714 22:14:08.533775 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/408dbf04-f002-4186-8204-74b44204ae18-xtables-lock\") pod \"calico-node-zlqsg\" (UID: \"408dbf04-f002-4186-8204-74b44204ae18\") " pod="calico-system/calico-node-zlqsg" Jul 14 22:14:08.534024 kubelet[2006]: I0714 22:14:08.534008 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/408dbf04-f002-4186-8204-74b44204ae18-lib-modules\") pod \"calico-node-zlqsg\" (UID: \"408dbf04-f002-4186-8204-74b44204ae18\") " pod="calico-system/calico-node-zlqsg" Jul 14 22:14:08.534180 kubelet[2006]: I0714 22:14:08.534163 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/408dbf04-f002-4186-8204-74b44204ae18-cni-bin-dir\") pod \"calico-node-zlqsg\" (UID: \"408dbf04-f002-4186-8204-74b44204ae18\") " pod="calico-system/calico-node-zlqsg" Jul 14 22:14:08.534309 kubelet[2006]: I0714 22:14:08.534290 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/408dbf04-f002-4186-8204-74b44204ae18-node-certs\") pod \"calico-node-zlqsg\" (UID: \"408dbf04-f002-4186-8204-74b44204ae18\") " pod="calico-system/calico-node-zlqsg" Jul 14 22:14:08.534402 kubelet[2006]: I0714 22:14:08.534387 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/408dbf04-f002-4186-8204-74b44204ae18-var-lib-calico\") pod \"calico-node-zlqsg\" (UID: \"408dbf04-f002-4186-8204-74b44204ae18\") " pod="calico-system/calico-node-zlqsg" Jul 14 22:14:08.534494 kubelet[2006]: I0714 22:14:08.534481 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/408dbf04-f002-4186-8204-74b44204ae18-cni-net-dir\") pod \"calico-node-zlqsg\" (UID: \"408dbf04-f002-4186-8204-74b44204ae18\") " pod="calico-system/calico-node-zlqsg" Jul 14 22:14:08.534589 kubelet[2006]: I0714 22:14:08.534572 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/408dbf04-f002-4186-8204-74b44204ae18-var-run-calico\") pod \"calico-node-zlqsg\" (UID: \"408dbf04-f002-4186-8204-74b44204ae18\") " pod="calico-system/calico-node-zlqsg" Jul 14 22:14:08.534687 kubelet[2006]: I0714 22:14:08.534669 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/408dbf04-f002-4186-8204-74b44204ae18-policysync\") pod \"calico-node-zlqsg\" (UID: \"408dbf04-f002-4186-8204-74b44204ae18\") " pod="calico-system/calico-node-zlqsg" Jul 14 22:14:08.534874 kubelet[2006]: I0714 22:14:08.534857 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/408dbf04-f002-4186-8204-74b44204ae18-flexvol-driver-host\") pod \"calico-node-zlqsg\" (UID: \"408dbf04-f002-4186-8204-74b44204ae18\") " pod="calico-system/calico-node-zlqsg" Jul 14 22:14:08.534997 kubelet[2006]: I0714 22:14:08.534983 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/408dbf04-f002-4186-8204-74b44204ae18-tigera-ca-bundle\") pod \"calico-node-zlqsg\" (UID: \"408dbf04-f002-4186-8204-74b44204ae18\") " pod="calico-system/calico-node-zlqsg" Jul 14 22:14:08.542390 env[1215]: time="2025-07-14T22:14:08.542332771Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6799d76845-mj9b2,Uid:4977d077-9477-4c62-9f71-69efd55d2d07,Namespace:calico-system,Attempt:0,} returns sandbox id \"17a09aaf373012a9272c2431178a272128d484b6eb3a9a4d922c3fe336dd250c\"" Jul 14 22:14:08.544346 kubelet[2006]: E0714 22:14:08.544315 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:14:08.547854 env[1215]: time="2025-07-14T22:14:08.547817691Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 14 22:14:08.636592 kubelet[2006]: E0714 22:14:08.636566 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.636846 kubelet[2006]: W0714 22:14:08.636826 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.637777 kubelet[2006]: E0714 22:14:08.637753 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.638116 kubelet[2006]: E0714 22:14:08.638096 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.638200 kubelet[2006]: W0714 22:14:08.638185 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.638270 kubelet[2006]: E0714 22:14:08.638257 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.638509 kubelet[2006]: E0714 22:14:08.638496 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.638597 kubelet[2006]: W0714 22:14:08.638583 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.638657 kubelet[2006]: E0714 22:14:08.638645 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.638953 kubelet[2006]: E0714 22:14:08.638933 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.639039 kubelet[2006]: W0714 22:14:08.639026 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.639104 kubelet[2006]: E0714 22:14:08.639093 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.639345 kubelet[2006]: E0714 22:14:08.639332 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.639422 kubelet[2006]: W0714 22:14:08.639409 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.639483 kubelet[2006]: E0714 22:14:08.639471 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.639700 kubelet[2006]: E0714 22:14:08.639687 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.639815 kubelet[2006]: W0714 22:14:08.639801 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.639880 kubelet[2006]: E0714 22:14:08.639868 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.640128 kubelet[2006]: E0714 22:14:08.640115 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.640202 kubelet[2006]: W0714 22:14:08.640190 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.640262 kubelet[2006]: E0714 22:14:08.640250 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.640479 kubelet[2006]: E0714 22:14:08.640467 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.640552 kubelet[2006]: W0714 22:14:08.640538 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.640613 kubelet[2006]: E0714 22:14:08.640602 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.640870 kubelet[2006]: E0714 22:14:08.640857 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.640941 kubelet[2006]: W0714 22:14:08.640929 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.641014 kubelet[2006]: E0714 22:14:08.640995 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.641246 kubelet[2006]: E0714 22:14:08.641233 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.641322 kubelet[2006]: W0714 22:14:08.641309 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.641381 kubelet[2006]: E0714 22:14:08.641370 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.641600 kubelet[2006]: E0714 22:14:08.641585 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.641677 kubelet[2006]: W0714 22:14:08.641664 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.641769 kubelet[2006]: E0714 22:14:08.641755 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.642031 kubelet[2006]: E0714 22:14:08.642017 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.642104 kubelet[2006]: W0714 22:14:08.642091 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.642162 kubelet[2006]: E0714 22:14:08.642151 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.642386 kubelet[2006]: E0714 22:14:08.642373 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.642462 kubelet[2006]: W0714 22:14:08.642448 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.642524 kubelet[2006]: E0714 22:14:08.642512 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.642834 kubelet[2006]: E0714 22:14:08.642818 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.642918 kubelet[2006]: W0714 22:14:08.642903 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.642974 kubelet[2006]: E0714 22:14:08.642962 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.643804 kubelet[2006]: E0714 22:14:08.643208 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.644622 kubelet[2006]: W0714 22:14:08.644320 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.644622 kubelet[2006]: E0714 22:14:08.644398 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.645216 kubelet[2006]: E0714 22:14:08.644943 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.645216 kubelet[2006]: W0714 22:14:08.644989 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.645216 kubelet[2006]: E0714 22:14:08.645006 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.645506 kubelet[2006]: E0714 22:14:08.645393 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.645506 kubelet[2006]: W0714 22:14:08.645408 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.645506 kubelet[2006]: E0714 22:14:08.645419 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.645674 kubelet[2006]: E0714 22:14:08.645661 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.645765 kubelet[2006]: W0714 22:14:08.645735 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.645848 kubelet[2006]: E0714 22:14:08.645835 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.646115 kubelet[2006]: E0714 22:14:08.646100 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.646242 kubelet[2006]: W0714 22:14:08.646188 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.646317 kubelet[2006]: E0714 22:14:08.646304 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.646548 kubelet[2006]: E0714 22:14:08.646533 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.646629 kubelet[2006]: W0714 22:14:08.646615 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.646692 kubelet[2006]: E0714 22:14:08.646678 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.647228 kubelet[2006]: E0714 22:14:08.647206 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.647315 kubelet[2006]: W0714 22:14:08.647301 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.647373 kubelet[2006]: E0714 22:14:08.647361 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.647949 kubelet[2006]: E0714 22:14:08.647932 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.648032 kubelet[2006]: W0714 22:14:08.648018 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.648091 kubelet[2006]: E0714 22:14:08.648079 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.648357 kubelet[2006]: E0714 22:14:08.648342 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.648428 kubelet[2006]: W0714 22:14:08.648415 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.648494 kubelet[2006]: E0714 22:14:08.648482 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.648830 kubelet[2006]: E0714 22:14:08.648814 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.649014 kubelet[2006]: W0714 22:14:08.648996 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.649080 kubelet[2006]: E0714 22:14:08.649068 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.649336 kubelet[2006]: E0714 22:14:08.649322 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.649416 kubelet[2006]: W0714 22:14:08.649403 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.649481 kubelet[2006]: E0714 22:14:08.649469 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.649718 kubelet[2006]: E0714 22:14:08.649704 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.649825 kubelet[2006]: W0714 22:14:08.649809 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.649895 kubelet[2006]: E0714 22:14:08.649884 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.650156 kubelet[2006]: E0714 22:14:08.650142 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.650234 kubelet[2006]: W0714 22:14:08.650219 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.650307 kubelet[2006]: E0714 22:14:08.650296 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.661055 kubelet[2006]: E0714 22:14:08.661035 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.661167 kubelet[2006]: W0714 22:14:08.661149 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.661231 kubelet[2006]: E0714 22:14:08.661216 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.726919 kubelet[2006]: E0714 22:14:08.726871 2006 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5sk6s" podUID="75f4d0f5-72b9-47b9-a4f2-494a583825cc" Jul 14 22:14:08.817671 kubelet[2006]: E0714 22:14:08.817633 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.817671 kubelet[2006]: W0714 22:14:08.817654 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.817671 kubelet[2006]: E0714 22:14:08.817674 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.817895 kubelet[2006]: E0714 22:14:08.817833 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.817895 kubelet[2006]: W0714 22:14:08.817841 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.817895 kubelet[2006]: E0714 22:14:08.817880 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.818021 kubelet[2006]: E0714 22:14:08.818001 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.818021 kubelet[2006]: W0714 22:14:08.818015 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.818224 kubelet[2006]: E0714 22:14:08.818024 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.818224 kubelet[2006]: E0714 22:14:08.818143 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.818224 kubelet[2006]: W0714 22:14:08.818150 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.818224 kubelet[2006]: E0714 22:14:08.818157 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.818323 kubelet[2006]: E0714 22:14:08.818291 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.818323 kubelet[2006]: W0714 22:14:08.818299 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.818323 kubelet[2006]: E0714 22:14:08.818306 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.818431 kubelet[2006]: E0714 22:14:08.818415 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.818431 kubelet[2006]: W0714 22:14:08.818422 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.818431 kubelet[2006]: E0714 22:14:08.818429 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.818559 kubelet[2006]: E0714 22:14:08.818533 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.818559 kubelet[2006]: W0714 22:14:08.818545 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.818559 kubelet[2006]: E0714 22:14:08.818553 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.818917 kubelet[2006]: E0714 22:14:08.818899 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.818917 kubelet[2006]: W0714 22:14:08.818912 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.819067 kubelet[2006]: E0714 22:14:08.818924 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.819104 kubelet[2006]: E0714 22:14:08.819077 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.819104 kubelet[2006]: W0714 22:14:08.819085 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.819104 kubelet[2006]: E0714 22:14:08.819093 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.819223 kubelet[2006]: E0714 22:14:08.819205 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.819223 kubelet[2006]: W0714 22:14:08.819220 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.819299 kubelet[2006]: E0714 22:14:08.819229 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.819353 kubelet[2006]: E0714 22:14:08.819338 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.819353 kubelet[2006]: W0714 22:14:08.819349 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.819353 kubelet[2006]: E0714 22:14:08.819358 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.819612 kubelet[2006]: E0714 22:14:08.819471 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.819612 kubelet[2006]: W0714 22:14:08.819478 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.819612 kubelet[2006]: E0714 22:14:08.819485 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.819612 kubelet[2006]: E0714 22:14:08.819614 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.819888 kubelet[2006]: W0714 22:14:08.819621 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.819888 kubelet[2006]: E0714 22:14:08.819630 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.819888 kubelet[2006]: E0714 22:14:08.819749 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.819888 kubelet[2006]: W0714 22:14:08.819756 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.819888 kubelet[2006]: E0714 22:14:08.819771 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.819888 kubelet[2006]: E0714 22:14:08.819891 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.820062 kubelet[2006]: W0714 22:14:08.819899 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.820062 kubelet[2006]: E0714 22:14:08.819906 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.820062 kubelet[2006]: E0714 22:14:08.820031 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.820062 kubelet[2006]: W0714 22:14:08.820040 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.820062 kubelet[2006]: E0714 22:14:08.820047 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.820244 kubelet[2006]: E0714 22:14:08.820174 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.820244 kubelet[2006]: W0714 22:14:08.820181 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.820244 kubelet[2006]: E0714 22:14:08.820187 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.820329 kubelet[2006]: E0714 22:14:08.820292 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.820329 kubelet[2006]: W0714 22:14:08.820298 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.820329 kubelet[2006]: E0714 22:14:08.820306 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.820431 kubelet[2006]: E0714 22:14:08.820413 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.820431 kubelet[2006]: W0714 22:14:08.820426 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.820498 kubelet[2006]: E0714 22:14:08.820434 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.820587 kubelet[2006]: E0714 22:14:08.820570 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.820587 kubelet[2006]: W0714 22:14:08.820582 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.820651 kubelet[2006]: E0714 22:14:08.820590 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.827000 audit[2493]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=2493 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:08.827000 audit[2493]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=fffff8c371d0 a2=0 a3=1 items=0 ppid=2113 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:08.827000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:08.832693 env[1215]: time="2025-07-14T22:14:08.832656223Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-zlqsg,Uid:408dbf04-f002-4186-8204-74b44204ae18,Namespace:calico-system,Attempt:0,}" Jul 14 22:14:08.835000 audit[2493]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2493 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:08.835000 audit[2493]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff8c371d0 a2=0 a3=1 items=0 ppid=2113 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:08.835000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:08.837652 kubelet[2006]: E0714 22:14:08.837632 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.837752 kubelet[2006]: W0714 22:14:08.837652 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.837752 kubelet[2006]: E0714 22:14:08.837670 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.837752 kubelet[2006]: I0714 22:14:08.837694 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/75f4d0f5-72b9-47b9-a4f2-494a583825cc-kubelet-dir\") pod \"csi-node-driver-5sk6s\" (UID: \"75f4d0f5-72b9-47b9-a4f2-494a583825cc\") " pod="calico-system/csi-node-driver-5sk6s" Jul 14 22:14:08.837950 kubelet[2006]: E0714 22:14:08.837933 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.837950 kubelet[2006]: W0714 22:14:08.837948 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.838024 kubelet[2006]: E0714 22:14:08.837958 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.838024 kubelet[2006]: I0714 22:14:08.838001 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/75f4d0f5-72b9-47b9-a4f2-494a583825cc-registration-dir\") pod \"csi-node-driver-5sk6s\" (UID: \"75f4d0f5-72b9-47b9-a4f2-494a583825cc\") " pod="calico-system/csi-node-driver-5sk6s" Jul 14 22:14:08.838209 kubelet[2006]: E0714 22:14:08.838196 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.838209 kubelet[2006]: W0714 22:14:08.838208 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.838276 kubelet[2006]: E0714 22:14:08.838216 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.838276 kubelet[2006]: I0714 22:14:08.838235 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/75f4d0f5-72b9-47b9-a4f2-494a583825cc-varrun\") pod \"csi-node-driver-5sk6s\" (UID: \"75f4d0f5-72b9-47b9-a4f2-494a583825cc\") " pod="calico-system/csi-node-driver-5sk6s" Jul 14 22:14:08.838413 kubelet[2006]: E0714 22:14:08.838401 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.838413 kubelet[2006]: W0714 22:14:08.838412 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.838500 kubelet[2006]: E0714 22:14:08.838420 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.838500 kubelet[2006]: I0714 22:14:08.838439 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/75f4d0f5-72b9-47b9-a4f2-494a583825cc-socket-dir\") pod \"csi-node-driver-5sk6s\" (UID: \"75f4d0f5-72b9-47b9-a4f2-494a583825cc\") " pod="calico-system/csi-node-driver-5sk6s" Jul 14 22:14:08.838611 kubelet[2006]: E0714 22:14:08.838599 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.838611 kubelet[2006]: W0714 22:14:08.838608 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.838678 kubelet[2006]: E0714 22:14:08.838616 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.838678 kubelet[2006]: I0714 22:14:08.838637 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-f88vq\" (UniqueName: \"kubernetes.io/projected/75f4d0f5-72b9-47b9-a4f2-494a583825cc-kube-api-access-f88vq\") pod \"csi-node-driver-5sk6s\" (UID: \"75f4d0f5-72b9-47b9-a4f2-494a583825cc\") " pod="calico-system/csi-node-driver-5sk6s" Jul 14 22:14:08.838860 kubelet[2006]: E0714 22:14:08.838845 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.838860 kubelet[2006]: W0714 22:14:08.838858 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.838923 kubelet[2006]: E0714 22:14:08.838867 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.839014 kubelet[2006]: E0714 22:14:08.839004 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.839014 kubelet[2006]: W0714 22:14:08.839013 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.839085 kubelet[2006]: E0714 22:14:08.839020 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.839171 kubelet[2006]: E0714 22:14:08.839159 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.839171 kubelet[2006]: W0714 22:14:08.839169 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.839227 kubelet[2006]: E0714 22:14:08.839176 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.839321 kubelet[2006]: E0714 22:14:08.839310 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.839321 kubelet[2006]: W0714 22:14:08.839319 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.839380 kubelet[2006]: E0714 22:14:08.839327 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.839470 kubelet[2006]: E0714 22:14:08.839459 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.839470 kubelet[2006]: W0714 22:14:08.839468 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.839538 kubelet[2006]: E0714 22:14:08.839477 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.839669 kubelet[2006]: E0714 22:14:08.839657 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.839669 kubelet[2006]: W0714 22:14:08.839667 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.839769 kubelet[2006]: E0714 22:14:08.839674 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.839858 kubelet[2006]: E0714 22:14:08.839844 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.839858 kubelet[2006]: W0714 22:14:08.839854 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.839920 kubelet[2006]: E0714 22:14:08.839862 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.840019 kubelet[2006]: E0714 22:14:08.840008 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.840019 kubelet[2006]: W0714 22:14:08.840017 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.840092 kubelet[2006]: E0714 22:14:08.840024 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.840202 kubelet[2006]: E0714 22:14:08.840188 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.840202 kubelet[2006]: W0714 22:14:08.840200 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.840265 kubelet[2006]: E0714 22:14:08.840209 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.840368 kubelet[2006]: E0714 22:14:08.840355 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.840368 kubelet[2006]: W0714 22:14:08.840366 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.840428 kubelet[2006]: E0714 22:14:08.840374 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.846102 env[1215]: time="2025-07-14T22:14:08.846030445Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:14:08.846102 env[1215]: time="2025-07-14T22:14:08.846070329Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:14:08.846353 env[1215]: time="2025-07-14T22:14:08.846080850Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:14:08.846755 env[1215]: time="2025-07-14T22:14:08.846573544Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a7765f720bf0e17c7fe43c2463d43336ef873ffd73601c000651d042d4727d4a pid=2537 runtime=io.containerd.runc.v2 Jul 14 22:14:08.857125 systemd[1]: Started cri-containerd-a7765f720bf0e17c7fe43c2463d43336ef873ffd73601c000651d042d4727d4a.scope. Jul 14 22:14:08.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.884000 audit: BPF prog-id=125 op=LOAD Jul 14 22:14:08.885000 audit[2547]: AVC avc: denied { bpf } for pid=2547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.885000 audit[2547]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2537 pid=2547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:08.885000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137373635663732306266306531376337666534336332343633643433 Jul 14 22:14:08.885000 audit[2547]: AVC avc: denied { perfmon } for pid=2547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.885000 audit[2547]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2537 pid=2547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:08.885000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137373635663732306266306531376337666534336332343633643433 Jul 14 22:14:08.886000 audit[2547]: AVC avc: denied { bpf } for pid=2547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.886000 audit[2547]: AVC avc: denied { bpf } for pid=2547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.886000 audit[2547]: AVC avc: denied { bpf } for pid=2547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.886000 audit[2547]: AVC avc: denied { perfmon } for pid=2547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.886000 audit[2547]: AVC avc: denied { perfmon } for pid=2547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.886000 audit[2547]: AVC avc: denied { perfmon } for pid=2547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.886000 audit[2547]: AVC avc: denied { perfmon } for pid=2547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.886000 audit[2547]: AVC avc: denied { perfmon } for pid=2547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.886000 audit[2547]: AVC avc: denied { bpf } for pid=2547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.886000 audit[2547]: AVC avc: denied { bpf } for pid=2547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.886000 audit: BPF prog-id=126 op=LOAD Jul 14 22:14:08.886000 audit[2547]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2537 pid=2547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:08.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137373635663732306266306531376337666534336332343633643433 Jul 14 22:14:08.886000 audit[2547]: AVC avc: denied { bpf } for pid=2547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.886000 audit[2547]: AVC avc: denied { bpf } for pid=2547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.886000 audit[2547]: AVC avc: denied { perfmon } for pid=2547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.886000 audit[2547]: AVC avc: denied { perfmon } for pid=2547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.886000 audit[2547]: AVC avc: denied { perfmon } for pid=2547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.886000 audit[2547]: AVC avc: denied { perfmon } for pid=2547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.886000 audit[2547]: AVC avc: denied { perfmon } for pid=2547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.886000 audit[2547]: AVC avc: denied { bpf } for pid=2547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.886000 audit[2547]: AVC avc: denied { bpf } for pid=2547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.886000 audit: BPF prog-id=127 op=LOAD Jul 14 22:14:08.886000 audit[2547]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2537 pid=2547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:08.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137373635663732306266306531376337666534336332343633643433 Jul 14 22:14:08.887000 audit: BPF prog-id=127 op=UNLOAD Jul 14 22:14:08.887000 audit: BPF prog-id=126 op=UNLOAD Jul 14 22:14:08.887000 audit[2547]: AVC avc: denied { bpf } for pid=2547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.887000 audit[2547]: AVC avc: denied { bpf } for pid=2547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.887000 audit[2547]: AVC avc: denied { bpf } for pid=2547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.887000 audit[2547]: AVC avc: denied { perfmon } for pid=2547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.887000 audit[2547]: AVC avc: denied { perfmon } for pid=2547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.887000 audit[2547]: AVC avc: denied { perfmon } for pid=2547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.887000 audit[2547]: AVC avc: denied { perfmon } for pid=2547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.887000 audit[2547]: AVC avc: denied { perfmon } for pid=2547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.887000 audit[2547]: AVC avc: denied { bpf } for pid=2547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.887000 audit[2547]: AVC avc: denied { bpf } for pid=2547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:08.887000 audit: BPF prog-id=128 op=LOAD Jul 14 22:14:08.887000 audit[2547]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2537 pid=2547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:08.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137373635663732306266306531376337666534336332343633643433 Jul 14 22:14:08.903059 env[1215]: time="2025-07-14T22:14:08.902969348Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-zlqsg,Uid:408dbf04-f002-4186-8204-74b44204ae18,Namespace:calico-system,Attempt:0,} returns sandbox id \"a7765f720bf0e17c7fe43c2463d43336ef873ffd73601c000651d042d4727d4a\"" Jul 14 22:14:08.939978 kubelet[2006]: E0714 22:14:08.939834 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.939978 kubelet[2006]: W0714 22:14:08.939855 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.939978 kubelet[2006]: E0714 22:14:08.939873 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.940371 kubelet[2006]: E0714 22:14:08.940214 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.940371 kubelet[2006]: W0714 22:14:08.940225 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.940371 kubelet[2006]: E0714 22:14:08.940237 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.940672 kubelet[2006]: E0714 22:14:08.940533 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.940672 kubelet[2006]: W0714 22:14:08.940545 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.940672 kubelet[2006]: E0714 22:14:08.940555 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.941001 kubelet[2006]: E0714 22:14:08.940869 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.941001 kubelet[2006]: W0714 22:14:08.940882 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.941001 kubelet[2006]: E0714 22:14:08.940892 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.941333 kubelet[2006]: E0714 22:14:08.941163 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.941333 kubelet[2006]: W0714 22:14:08.941176 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.941333 kubelet[2006]: E0714 22:14:08.941186 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.941769 kubelet[2006]: E0714 22:14:08.941489 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.941769 kubelet[2006]: W0714 22:14:08.941502 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.941769 kubelet[2006]: E0714 22:14:08.941512 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.942112 kubelet[2006]: E0714 22:14:08.941955 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.942112 kubelet[2006]: W0714 22:14:08.941970 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.942112 kubelet[2006]: E0714 22:14:08.941989 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.942402 kubelet[2006]: E0714 22:14:08.942271 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.942402 kubelet[2006]: W0714 22:14:08.942284 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.942402 kubelet[2006]: E0714 22:14:08.942294 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.942754 kubelet[2006]: E0714 22:14:08.942607 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.942754 kubelet[2006]: W0714 22:14:08.942622 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.942754 kubelet[2006]: E0714 22:14:08.942632 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.943103 kubelet[2006]: E0714 22:14:08.942987 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.943103 kubelet[2006]: W0714 22:14:08.943000 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.943103 kubelet[2006]: E0714 22:14:08.943011 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.943398 kubelet[2006]: E0714 22:14:08.943281 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.943398 kubelet[2006]: W0714 22:14:08.943293 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.943398 kubelet[2006]: E0714 22:14:08.943303 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.943662 kubelet[2006]: E0714 22:14:08.943540 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.943662 kubelet[2006]: W0714 22:14:08.943552 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.943662 kubelet[2006]: E0714 22:14:08.943562 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.943975 kubelet[2006]: E0714 22:14:08.943871 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.944236 kubelet[2006]: W0714 22:14:08.943884 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.944236 kubelet[2006]: E0714 22:14:08.944105 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.944498 kubelet[2006]: E0714 22:14:08.944394 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.944498 kubelet[2006]: W0714 22:14:08.944407 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.944498 kubelet[2006]: E0714 22:14:08.944418 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.944749 kubelet[2006]: E0714 22:14:08.944735 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.944840 kubelet[2006]: W0714 22:14:08.944825 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.944901 kubelet[2006]: E0714 22:14:08.944890 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.945154 kubelet[2006]: E0714 22:14:08.945139 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.945234 kubelet[2006]: W0714 22:14:08.945216 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.945301 kubelet[2006]: E0714 22:14:08.945287 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.945609 kubelet[2006]: E0714 22:14:08.945595 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.945685 kubelet[2006]: W0714 22:14:08.945672 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.945759 kubelet[2006]: E0714 22:14:08.945745 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.946009 kubelet[2006]: E0714 22:14:08.945997 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.946088 kubelet[2006]: W0714 22:14:08.946075 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.946152 kubelet[2006]: E0714 22:14:08.946140 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.946383 kubelet[2006]: E0714 22:14:08.946371 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.946461 kubelet[2006]: W0714 22:14:08.946448 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.946515 kubelet[2006]: E0714 22:14:08.946505 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.946812 kubelet[2006]: E0714 22:14:08.946799 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.946884 kubelet[2006]: W0714 22:14:08.946871 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.946949 kubelet[2006]: E0714 22:14:08.946937 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.947202 kubelet[2006]: E0714 22:14:08.947189 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.947281 kubelet[2006]: W0714 22:14:08.947267 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.947336 kubelet[2006]: E0714 22:14:08.947325 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.947571 kubelet[2006]: E0714 22:14:08.947560 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.947641 kubelet[2006]: W0714 22:14:08.947630 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.947700 kubelet[2006]: E0714 22:14:08.947689 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.947984 kubelet[2006]: E0714 22:14:08.947972 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.948062 kubelet[2006]: W0714 22:14:08.948043 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.948130 kubelet[2006]: E0714 22:14:08.948119 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.948395 kubelet[2006]: E0714 22:14:08.948383 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.948467 kubelet[2006]: W0714 22:14:08.948454 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.948519 kubelet[2006]: E0714 22:14:08.948509 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.948782 kubelet[2006]: E0714 22:14:08.948763 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.948858 kubelet[2006]: W0714 22:14:08.948844 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.948926 kubelet[2006]: E0714 22:14:08.948914 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:08.957832 kubelet[2006]: E0714 22:14:08.957810 2006 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:14:08.957832 kubelet[2006]: W0714 22:14:08.957828 2006 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:14:08.957931 kubelet[2006]: E0714 22:14:08.957841 2006 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:14:09.240705 systemd[1]: run-containerd-runc-k8s.io-17a09aaf373012a9272c2431178a272128d484b6eb3a9a4d922c3fe336dd250c-runc.hFAgFT.mount: Deactivated successfully. Jul 14 22:14:09.494430 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3984158310.mount: Deactivated successfully. Jul 14 22:14:10.154195 env[1215]: time="2025-07-14T22:14:10.154151985Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:10.155589 env[1215]: time="2025-07-14T22:14:10.155544014Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:10.157252 env[1215]: time="2025-07-14T22:14:10.157228233Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:10.158244 env[1215]: time="2025-07-14T22:14:10.158211338Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:10.158921 env[1215]: time="2025-07-14T22:14:10.158885810Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2\"" Jul 14 22:14:10.165640 env[1215]: time="2025-07-14T22:14:10.165614687Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 14 22:14:10.184141 env[1215]: time="2025-07-14T22:14:10.184099056Z" level=info msg="CreateContainer within sandbox \"17a09aaf373012a9272c2431178a272128d484b6eb3a9a4d922c3fe336dd250c\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 14 22:14:10.203918 env[1215]: time="2025-07-14T22:14:10.203865722Z" level=info msg="CreateContainer within sandbox \"17a09aaf373012a9272c2431178a272128d484b6eb3a9a4d922c3fe336dd250c\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"26f978de4dc0751c0314d68ad7a269467be215a345a9f65f2974c901ba3bfe29\"" Jul 14 22:14:10.206030 env[1215]: time="2025-07-14T22:14:10.205975827Z" level=info msg="StartContainer for \"26f978de4dc0751c0314d68ad7a269467be215a345a9f65f2974c901ba3bfe29\"" Jul 14 22:14:10.225423 systemd[1]: Started cri-containerd-26f978de4dc0751c0314d68ad7a269467be215a345a9f65f2974c901ba3bfe29.scope. Jul 14 22:14:10.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.254000 audit: BPF prog-id=129 op=LOAD Jul 14 22:14:10.255000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.255000 audit[2607]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2427 pid=2607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:10.255000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236663937386465346463303735316330333134643638616437613236 Jul 14 22:14:10.255000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.255000 audit[2607]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2427 pid=2607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:10.255000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236663937386465346463303735316330333134643638616437613236 Jul 14 22:14:10.255000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.255000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.255000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.255000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.255000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.255000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.255000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.255000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.255000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.255000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.255000 audit: BPF prog-id=130 op=LOAD Jul 14 22:14:10.255000 audit[2607]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2427 pid=2607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:10.255000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236663937386465346463303735316330333134643638616437613236 Jul 14 22:14:10.256000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.256000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.256000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.256000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.256000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.256000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.256000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.256000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.256000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.256000 audit: BPF prog-id=131 op=LOAD Jul 14 22:14:10.256000 audit[2607]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2427 pid=2607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:10.256000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236663937386465346463303735316330333134643638616437613236 Jul 14 22:14:10.256000 audit: BPF prog-id=131 op=UNLOAD Jul 14 22:14:10.256000 audit: BPF prog-id=130 op=UNLOAD Jul 14 22:14:10.256000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.256000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.256000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.256000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.256000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.256000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.256000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.256000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.256000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.256000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:10.256000 audit: BPF prog-id=132 op=LOAD Jul 14 22:14:10.256000 audit[2607]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2427 pid=2607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:10.256000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236663937386465346463303735316330333134643638616437613236 Jul 14 22:14:10.332461 env[1215]: time="2025-07-14T22:14:10.332306288Z" level=info msg="StartContainer for \"26f978de4dc0751c0314d68ad7a269467be215a345a9f65f2974c901ba3bfe29\" returns successfully" Jul 14 22:14:10.980559 kubelet[2006]: E0714 22:14:10.980505 2006 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5sk6s" podUID="75f4d0f5-72b9-47b9-a4f2-494a583825cc" Jul 14 22:14:10.981553 env[1215]: time="2025-07-14T22:14:10.981495342Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:10.983147 env[1215]: time="2025-07-14T22:14:10.983111074Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:10.984789 env[1215]: time="2025-07-14T22:14:10.984764570Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:10.986428 env[1215]: time="2025-07-14T22:14:10.986395144Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:10.986947 env[1215]: time="2025-07-14T22:14:10.986921200Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f\"" Jul 14 22:14:10.991545 env[1215]: time="2025-07-14T22:14:10.991514409Z" level=info msg="CreateContainer within sandbox \"a7765f720bf0e17c7fe43c2463d43336ef873ffd73601c000651d042d4727d4a\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 14 22:14:11.006148 env[1215]: time="2025-07-14T22:14:11.006117960Z" level=info msg="CreateContainer within sandbox \"a7765f720bf0e17c7fe43c2463d43336ef873ffd73601c000651d042d4727d4a\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"bb28aab62a1f26d5bdba327cba99ded27ffdabdbfc37ba0973517a8b7a868769\"" Jul 14 22:14:11.007067 env[1215]: time="2025-07-14T22:14:11.007032296Z" level=info msg="StartContainer for \"bb28aab62a1f26d5bdba327cba99ded27ffdabdbfc37ba0973517a8b7a868769\"" Jul 14 22:14:11.034200 systemd[1]: Started cri-containerd-bb28aab62a1f26d5bdba327cba99ded27ffdabdbfc37ba0973517a8b7a868769.scope. Jul 14 22:14:11.045832 kubelet[2006]: E0714 22:14:11.045783 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:14:11.073306 kubelet[2006]: I0714 22:14:11.073083 2006 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-6799d76845-mj9b2" podStartSLOduration=1.456986437 podStartE2EDuration="3.07306405s" podCreationTimestamp="2025-07-14 22:14:08 +0000 UTC" firstStartedPulling="2025-07-14 22:14:08.547499256 +0000 UTC m=+24.662672901" lastFinishedPulling="2025-07-14 22:14:10.163576869 +0000 UTC m=+26.278750514" observedRunningTime="2025-07-14 22:14:11.072316611 +0000 UTC m=+27.187490256" watchObservedRunningTime="2025-07-14 22:14:11.07306405 +0000 UTC m=+27.188237655" Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { perfmon } for pid=2650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit[2650]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400020f5a0 a2=3c a3=0 items=0 ppid=2537 pid=2650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:11.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262323861616236326131663236643562646261333237636261393964 Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { bpf } for pid=2650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { bpf } for pid=2650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { bpf } for pid=2650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { perfmon } for pid=2650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { perfmon } for pid=2650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { perfmon } for pid=2650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { perfmon } for pid=2650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { perfmon } for pid=2650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { bpf } for pid=2650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { bpf } for pid=2650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit: BPF prog-id=133 op=LOAD Jul 14 22:14:11.091000 audit[2650]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400020f8e0 a2=78 a3=0 items=0 ppid=2537 pid=2650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:11.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262323861616236326131663236643562646261333237636261393964 Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { bpf } for pid=2650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { bpf } for pid=2650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { perfmon } for pid=2650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { perfmon } for pid=2650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { perfmon } for pid=2650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { perfmon } for pid=2650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { perfmon } for pid=2650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { bpf } for pid=2650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { bpf } for pid=2650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit: BPF prog-id=134 op=LOAD Jul 14 22:14:11.091000 audit[2650]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400020f670 a2=78 a3=0 items=0 ppid=2537 pid=2650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:11.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262323861616236326131663236643562646261333237636261393964 Jul 14 22:14:11.091000 audit: BPF prog-id=134 op=UNLOAD Jul 14 22:14:11.091000 audit: BPF prog-id=133 op=UNLOAD Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { bpf } for pid=2650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { bpf } for pid=2650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { bpf } for pid=2650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { perfmon } for pid=2650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { perfmon } for pid=2650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { perfmon } for pid=2650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { perfmon } for pid=2650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { perfmon } for pid=2650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { bpf } for pid=2650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit[2650]: AVC avc: denied { bpf } for pid=2650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:11.091000 audit: BPF prog-id=135 op=LOAD Jul 14 22:14:11.091000 audit[2650]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400020fb40 a2=78 a3=0 items=0 ppid=2537 pid=2650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:11.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262323861616236326131663236643562646261333237636261393964 Jul 14 22:14:11.107467 env[1215]: time="2025-07-14T22:14:11.107418908Z" level=info msg="StartContainer for \"bb28aab62a1f26d5bdba327cba99ded27ffdabdbfc37ba0973517a8b7a868769\" returns successfully" Jul 14 22:14:11.124634 systemd[1]: cri-containerd-bb28aab62a1f26d5bdba327cba99ded27ffdabdbfc37ba0973517a8b7a868769.scope: Deactivated successfully. Jul 14 22:14:11.130000 audit: BPF prog-id=135 op=UNLOAD Jul 14 22:14:11.158621 env[1215]: time="2025-07-14T22:14:11.158527690Z" level=info msg="shim disconnected" id=bb28aab62a1f26d5bdba327cba99ded27ffdabdbfc37ba0973517a8b7a868769 Jul 14 22:14:11.158621 env[1215]: time="2025-07-14T22:14:11.158580856Z" level=warning msg="cleaning up after shim disconnected" id=bb28aab62a1f26d5bdba327cba99ded27ffdabdbfc37ba0973517a8b7a868769 namespace=k8s.io Jul 14 22:14:11.158621 env[1215]: time="2025-07-14T22:14:11.158589617Z" level=info msg="cleaning up dead shim" Jul 14 22:14:11.164972 env[1215]: time="2025-07-14T22:14:11.164937485Z" level=warning msg="cleanup warnings time=\"2025-07-14T22:14:11Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2695 runtime=io.containerd.runc.v2\n" Jul 14 22:14:11.237521 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-bb28aab62a1f26d5bdba327cba99ded27ffdabdbfc37ba0973517a8b7a868769-rootfs.mount: Deactivated successfully. Jul 14 22:14:12.048214 kubelet[2006]: I0714 22:14:12.048186 2006 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 22:14:12.048980 kubelet[2006]: E0714 22:14:12.048958 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:14:12.049051 env[1215]: time="2025-07-14T22:14:12.049020091Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 14 22:14:12.980653 kubelet[2006]: E0714 22:14:12.980284 2006 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5sk6s" podUID="75f4d0f5-72b9-47b9-a4f2-494a583825cc" Jul 14 22:14:14.306660 env[1215]: time="2025-07-14T22:14:14.306576576Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:14.308245 env[1215]: time="2025-07-14T22:14:14.308217343Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:14.309395 env[1215]: time="2025-07-14T22:14:14.309368661Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:14.310477 env[1215]: time="2025-07-14T22:14:14.310447211Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:14.310987 env[1215]: time="2025-07-14T22:14:14.310957183Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588\"" Jul 14 22:14:14.315510 env[1215]: time="2025-07-14T22:14:14.315476444Z" level=info msg="CreateContainer within sandbox \"a7765f720bf0e17c7fe43c2463d43336ef873ffd73601c000651d042d4727d4a\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 14 22:14:14.326248 env[1215]: time="2025-07-14T22:14:14.326149853Z" level=info msg="CreateContainer within sandbox \"a7765f720bf0e17c7fe43c2463d43336ef873ffd73601c000651d042d4727d4a\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"34da07831c9e6d296f2e1c6a378ed1b509f786bc6e87bb172ef4f5422ff28718\"" Jul 14 22:14:14.326544 env[1215]: time="2025-07-14T22:14:14.326504369Z" level=info msg="StartContainer for \"34da07831c9e6d296f2e1c6a378ed1b509f786bc6e87bb172ef4f5422ff28718\"" Jul 14 22:14:14.350123 systemd[1]: Started cri-containerd-34da07831c9e6d296f2e1c6a378ed1b509f786bc6e87bb172ef4f5422ff28718.scope. Jul 14 22:14:14.386000 audit[2715]: AVC avc: denied { perfmon } for pid=2715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.388038 kernel: kauditd_printk_skb: 211 callbacks suppressed Jul 14 22:14:14.388100 kernel: audit: type=1400 audit(1752531254.386:1005): avc: denied { perfmon } for pid=2715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.386000 audit[2715]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2537 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:14.394375 kernel: audit: type=1300 audit(1752531254.386:1005): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2537 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:14.394661 kernel: audit: type=1327 audit(1752531254.386:1005): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334646130373833316339653664323936663265316336613337386564 Jul 14 22:14:14.386000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334646130373833316339653664323936663265316336613337386564 Jul 14 22:14:14.386000 audit[2715]: AVC avc: denied { bpf } for pid=2715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.399946 kernel: audit: type=1400 audit(1752531254.386:1006): avc: denied { bpf } for pid=2715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.399978 kernel: audit: type=1400 audit(1752531254.386:1006): avc: denied { bpf } for pid=2715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.386000 audit[2715]: AVC avc: denied { bpf } for pid=2715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.386000 audit[2715]: AVC avc: denied { bpf } for pid=2715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.404943 kernel: audit: type=1400 audit(1752531254.386:1006): avc: denied { bpf } for pid=2715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.405024 kernel: audit: type=1400 audit(1752531254.386:1006): avc: denied { perfmon } for pid=2715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.386000 audit[2715]: AVC avc: denied { perfmon } for pid=2715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.386000 audit[2715]: AVC avc: denied { perfmon } for pid=2715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.409730 kernel: audit: type=1400 audit(1752531254.386:1006): avc: denied { perfmon } for pid=2715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.409811 kernel: audit: type=1400 audit(1752531254.386:1006): avc: denied { perfmon } for pid=2715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.386000 audit[2715]: AVC avc: denied { perfmon } for pid=2715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.386000 audit[2715]: AVC avc: denied { perfmon } for pid=2715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.414551 kernel: audit: type=1400 audit(1752531254.386:1006): avc: denied { perfmon } for pid=2715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.386000 audit[2715]: AVC avc: denied { perfmon } for pid=2715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.386000 audit[2715]: AVC avc: denied { bpf } for pid=2715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.386000 audit[2715]: AVC avc: denied { bpf } for pid=2715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.386000 audit: BPF prog-id=136 op=LOAD Jul 14 22:14:14.386000 audit[2715]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2537 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:14.386000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334646130373833316339653664323936663265316336613337386564 Jul 14 22:14:14.387000 audit[2715]: AVC avc: denied { bpf } for pid=2715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.387000 audit[2715]: AVC avc: denied { bpf } for pid=2715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.387000 audit[2715]: AVC avc: denied { perfmon } for pid=2715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.387000 audit[2715]: AVC avc: denied { perfmon } for pid=2715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.387000 audit[2715]: AVC avc: denied { perfmon } for pid=2715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.387000 audit[2715]: AVC avc: denied { perfmon } for pid=2715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.387000 audit[2715]: AVC avc: denied { perfmon } for pid=2715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.387000 audit[2715]: AVC avc: denied { bpf } for pid=2715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.387000 audit[2715]: AVC avc: denied { bpf } for pid=2715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.387000 audit: BPF prog-id=137 op=LOAD Jul 14 22:14:14.387000 audit[2715]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2537 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:14.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334646130373833316339653664323936663265316336613337386564 Jul 14 22:14:14.389000 audit: BPF prog-id=137 op=UNLOAD Jul 14 22:14:14.389000 audit: BPF prog-id=136 op=UNLOAD Jul 14 22:14:14.389000 audit[2715]: AVC avc: denied { bpf } for pid=2715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.389000 audit[2715]: AVC avc: denied { bpf } for pid=2715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.389000 audit[2715]: AVC avc: denied { bpf } for pid=2715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.389000 audit[2715]: AVC avc: denied { perfmon } for pid=2715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.389000 audit[2715]: AVC avc: denied { perfmon } for pid=2715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.389000 audit[2715]: AVC avc: denied { perfmon } for pid=2715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.389000 audit[2715]: AVC avc: denied { perfmon } for pid=2715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.389000 audit[2715]: AVC avc: denied { perfmon } for pid=2715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.389000 audit[2715]: AVC avc: denied { bpf } for pid=2715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.389000 audit[2715]: AVC avc: denied { bpf } for pid=2715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:14.389000 audit: BPF prog-id=138 op=LOAD Jul 14 22:14:14.389000 audit[2715]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2537 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:14.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334646130373833316339653664323936663265316336613337386564 Jul 14 22:14:14.453958 env[1215]: time="2025-07-14T22:14:14.453914088Z" level=info msg="StartContainer for \"34da07831c9e6d296f2e1c6a378ed1b509f786bc6e87bb172ef4f5422ff28718\" returns successfully" Jul 14 22:14:14.980347 kubelet[2006]: E0714 22:14:14.980291 2006 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5sk6s" podUID="75f4d0f5-72b9-47b9-a4f2-494a583825cc" Jul 14 22:14:14.993775 env[1215]: time="2025-07-14T22:14:14.993710239Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 14 22:14:14.995914 systemd[1]: cri-containerd-34da07831c9e6d296f2e1c6a378ed1b509f786bc6e87bb172ef4f5422ff28718.scope: Deactivated successfully. Jul 14 22:14:15.001000 audit: BPF prog-id=138 op=UNLOAD Jul 14 22:14:15.016026 env[1215]: time="2025-07-14T22:14:15.015984977Z" level=info msg="shim disconnected" id=34da07831c9e6d296f2e1c6a378ed1b509f786bc6e87bb172ef4f5422ff28718 Jul 14 22:14:15.016026 env[1215]: time="2025-07-14T22:14:15.016025821Z" level=warning msg="cleaning up after shim disconnected" id=34da07831c9e6d296f2e1c6a378ed1b509f786bc6e87bb172ef4f5422ff28718 namespace=k8s.io Jul 14 22:14:15.016217 env[1215]: time="2025-07-14T22:14:15.016034822Z" level=info msg="cleaning up dead shim" Jul 14 22:14:15.022546 env[1215]: time="2025-07-14T22:14:15.022485954Z" level=warning msg="cleanup warnings time=\"2025-07-14T22:14:15Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2756 runtime=io.containerd.runc.v2\n" Jul 14 22:14:15.041162 kubelet[2006]: I0714 22:14:15.040934 2006 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Jul 14 22:14:15.058753 env[1215]: time="2025-07-14T22:14:15.056073749Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 14 22:14:15.078930 systemd[1]: Created slice kubepods-besteffort-podd1ed8c37_1b24_429a_ae6d_4e451008faeb.slice. Jul 14 22:14:15.083228 systemd[1]: Created slice kubepods-besteffort-poda309be2c_e649_4b80_9723_4bb86fe0fdd0.slice. Jul 14 22:14:15.087504 systemd[1]: Created slice kubepods-besteffort-pod873b6b5c_5253_4b84_b586_5af9f7e09daa.slice. Jul 14 22:14:15.089092 kubelet[2006]: I0714 22:14:15.088039 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/a309be2c-e649-4b80-9723-4bb86fe0fdd0-calico-apiserver-certs\") pod \"calico-apiserver-74cfd4cbdb-f9z8h\" (UID: \"a309be2c-e649-4b80-9723-4bb86fe0fdd0\") " pod="calico-apiserver/calico-apiserver-74cfd4cbdb-f9z8h" Jul 14 22:14:15.089092 kubelet[2006]: I0714 22:14:15.088085 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d1ed8c37-1b24-429a-ae6d-4e451008faeb-whisker-ca-bundle\") pod \"whisker-7967ff6466-rsxkv\" (UID: \"d1ed8c37-1b24-429a-ae6d-4e451008faeb\") " pod="calico-system/whisker-7967ff6466-rsxkv" Jul 14 22:14:15.089092 kubelet[2006]: I0714 22:14:15.088126 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/873b6b5c-5253-4b84-b586-5af9f7e09daa-config\") pod \"goldmane-768f4c5c69-cszg5\" (UID: \"873b6b5c-5253-4b84-b586-5af9f7e09daa\") " pod="calico-system/goldmane-768f4c5c69-cszg5" Jul 14 22:14:15.089092 kubelet[2006]: I0714 22:14:15.088143 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/873b6b5c-5253-4b84-b586-5af9f7e09daa-goldmane-key-pair\") pod \"goldmane-768f4c5c69-cszg5\" (UID: \"873b6b5c-5253-4b84-b586-5af9f7e09daa\") " pod="calico-system/goldmane-768f4c5c69-cszg5" Jul 14 22:14:15.089092 kubelet[2006]: I0714 22:14:15.088158 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qh9cg\" (UniqueName: \"kubernetes.io/projected/a309be2c-e649-4b80-9723-4bb86fe0fdd0-kube-api-access-qh9cg\") pod \"calico-apiserver-74cfd4cbdb-f9z8h\" (UID: \"a309be2c-e649-4b80-9723-4bb86fe0fdd0\") " pod="calico-apiserver/calico-apiserver-74cfd4cbdb-f9z8h" Jul 14 22:14:15.089317 kubelet[2006]: I0714 22:14:15.088174 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-plwwg\" (UniqueName: \"kubernetes.io/projected/d1ed8c37-1b24-429a-ae6d-4e451008faeb-kube-api-access-plwwg\") pod \"whisker-7967ff6466-rsxkv\" (UID: \"d1ed8c37-1b24-429a-ae6d-4e451008faeb\") " pod="calico-system/whisker-7967ff6466-rsxkv" Jul 14 22:14:15.089317 kubelet[2006]: I0714 22:14:15.088187 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zhd74\" (UniqueName: \"kubernetes.io/projected/1b6ea792-b855-4382-96d6-ba04817e00fd-kube-api-access-zhd74\") pod \"calico-apiserver-74cfd4cbdb-6xqzx\" (UID: \"1b6ea792-b855-4382-96d6-ba04817e00fd\") " pod="calico-apiserver/calico-apiserver-74cfd4cbdb-6xqzx" Jul 14 22:14:15.089317 kubelet[2006]: I0714 22:14:15.088215 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/873b6b5c-5253-4b84-b586-5af9f7e09daa-goldmane-ca-bundle\") pod \"goldmane-768f4c5c69-cszg5\" (UID: \"873b6b5c-5253-4b84-b586-5af9f7e09daa\") " pod="calico-system/goldmane-768f4c5c69-cszg5" Jul 14 22:14:15.089317 kubelet[2006]: I0714 22:14:15.088229 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-v4827\" (UniqueName: \"kubernetes.io/projected/873b6b5c-5253-4b84-b586-5af9f7e09daa-kube-api-access-v4827\") pod \"goldmane-768f4c5c69-cszg5\" (UID: \"873b6b5c-5253-4b84-b586-5af9f7e09daa\") " pod="calico-system/goldmane-768f4c5c69-cszg5" Jul 14 22:14:15.089317 kubelet[2006]: I0714 22:14:15.088243 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/1b6ea792-b855-4382-96d6-ba04817e00fd-calico-apiserver-certs\") pod \"calico-apiserver-74cfd4cbdb-6xqzx\" (UID: \"1b6ea792-b855-4382-96d6-ba04817e00fd\") " pod="calico-apiserver/calico-apiserver-74cfd4cbdb-6xqzx" Jul 14 22:14:15.089466 kubelet[2006]: I0714 22:14:15.088270 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/d1ed8c37-1b24-429a-ae6d-4e451008faeb-whisker-backend-key-pair\") pod \"whisker-7967ff6466-rsxkv\" (UID: \"d1ed8c37-1b24-429a-ae6d-4e451008faeb\") " pod="calico-system/whisker-7967ff6466-rsxkv" Jul 14 22:14:15.089466 kubelet[2006]: I0714 22:14:15.088285 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/315abcdd-d782-4be2-bcc4-f381a2f1b50e-config-volume\") pod \"coredns-674b8bbfcf-5p6rx\" (UID: \"315abcdd-d782-4be2-bcc4-f381a2f1b50e\") " pod="kube-system/coredns-674b8bbfcf-5p6rx" Jul 14 22:14:15.089466 kubelet[2006]: I0714 22:14:15.088309 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7vfjm\" (UniqueName: \"kubernetes.io/projected/315abcdd-d782-4be2-bcc4-f381a2f1b50e-kube-api-access-7vfjm\") pod \"coredns-674b8bbfcf-5p6rx\" (UID: \"315abcdd-d782-4be2-bcc4-f381a2f1b50e\") " pod="kube-system/coredns-674b8bbfcf-5p6rx" Jul 14 22:14:15.093827 systemd[1]: Created slice kubepods-besteffort-pod1b6ea792_b855_4382_96d6_ba04817e00fd.slice. Jul 14 22:14:15.098226 systemd[1]: Created slice kubepods-burstable-pod315abcdd_d782_4be2_bcc4_f381a2f1b50e.slice. Jul 14 22:14:15.101659 systemd[1]: Created slice kubepods-burstable-podf2152eb1_3ffc_418b_80cb_f2d468160f26.slice. Jul 14 22:14:15.107857 systemd[1]: Created slice kubepods-besteffort-podbb8a40bd_e0ea_46bb_aab7_968e8d6511da.slice. Jul 14 22:14:15.189517 kubelet[2006]: I0714 22:14:15.189478 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/f2152eb1-3ffc-418b-80cb-f2d468160f26-config-volume\") pod \"coredns-674b8bbfcf-9l5g9\" (UID: \"f2152eb1-3ffc-418b-80cb-f2d468160f26\") " pod="kube-system/coredns-674b8bbfcf-9l5g9" Jul 14 22:14:15.189793 kubelet[2006]: I0714 22:14:15.189771 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-k5kh7\" (UniqueName: \"kubernetes.io/projected/bb8a40bd-e0ea-46bb-aab7-968e8d6511da-kube-api-access-k5kh7\") pod \"calico-kube-controllers-88b4685f-k9zr5\" (UID: \"bb8a40bd-e0ea-46bb-aab7-968e8d6511da\") " pod="calico-system/calico-kube-controllers-88b4685f-k9zr5" Jul 14 22:14:15.189909 kubelet[2006]: I0714 22:14:15.189892 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/bb8a40bd-e0ea-46bb-aab7-968e8d6511da-tigera-ca-bundle\") pod \"calico-kube-controllers-88b4685f-k9zr5\" (UID: \"bb8a40bd-e0ea-46bb-aab7-968e8d6511da\") " pod="calico-system/calico-kube-controllers-88b4685f-k9zr5" Jul 14 22:14:15.190066 kubelet[2006]: I0714 22:14:15.190048 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5h78j\" (UniqueName: \"kubernetes.io/projected/f2152eb1-3ffc-418b-80cb-f2d468160f26-kube-api-access-5h78j\") pod \"coredns-674b8bbfcf-9l5g9\" (UID: \"f2152eb1-3ffc-418b-80cb-f2d468160f26\") " pod="kube-system/coredns-674b8bbfcf-9l5g9" Jul 14 22:14:15.331268 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-34da07831c9e6d296f2e1c6a378ed1b509f786bc6e87bb172ef4f5422ff28718-rootfs.mount: Deactivated successfully. Jul 14 22:14:15.381972 env[1215]: time="2025-07-14T22:14:15.381908838Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7967ff6466-rsxkv,Uid:d1ed8c37-1b24-429a-ae6d-4e451008faeb,Namespace:calico-system,Attempt:0,}" Jul 14 22:14:15.386438 env[1215]: time="2025-07-14T22:14:15.386389731Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-74cfd4cbdb-f9z8h,Uid:a309be2c-e649-4b80-9723-4bb86fe0fdd0,Namespace:calico-apiserver,Attempt:0,}" Jul 14 22:14:15.393233 env[1215]: time="2025-07-14T22:14:15.393188058Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-cszg5,Uid:873b6b5c-5253-4b84-b586-5af9f7e09daa,Namespace:calico-system,Attempt:0,}" Jul 14 22:14:15.397313 env[1215]: time="2025-07-14T22:14:15.397281752Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-74cfd4cbdb-6xqzx,Uid:1b6ea792-b855-4382-96d6-ba04817e00fd,Namespace:calico-apiserver,Attempt:0,}" Jul 14 22:14:15.401846 kubelet[2006]: E0714 22:14:15.401815 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:14:15.405463 kubelet[2006]: E0714 22:14:15.405438 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:14:15.405917 env[1215]: time="2025-07-14T22:14:15.405866379Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-9l5g9,Uid:f2152eb1-3ffc-418b-80cb-f2d468160f26,Namespace:kube-system,Attempt:0,}" Jul 14 22:14:15.406295 env[1215]: time="2025-07-14T22:14:15.406225055Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-5p6rx,Uid:315abcdd-d782-4be2-bcc4-f381a2f1b50e,Namespace:kube-system,Attempt:0,}" Jul 14 22:14:15.417606 env[1215]: time="2025-07-14T22:14:15.417564721Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-88b4685f-k9zr5,Uid:bb8a40bd-e0ea-46bb-aab7-968e8d6511da,Namespace:calico-system,Attempt:0,}" Jul 14 22:14:15.750444 env[1215]: time="2025-07-14T22:14:15.750365315Z" level=error msg="Failed to destroy network for sandbox \"41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:15.750908 env[1215]: time="2025-07-14T22:14:15.750866565Z" level=error msg="encountered an error cleaning up failed sandbox \"41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:15.750978 env[1215]: time="2025-07-14T22:14:15.750921331Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-9l5g9,Uid:f2152eb1-3ffc-418b-80cb-f2d468160f26,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:15.751174 kubelet[2006]: E0714 22:14:15.751136 2006 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:15.751379 kubelet[2006]: E0714 22:14:15.751205 2006 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-9l5g9" Jul 14 22:14:15.751940 kubelet[2006]: E0714 22:14:15.751902 2006 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-9l5g9" Jul 14 22:14:15.752020 kubelet[2006]: E0714 22:14:15.751979 2006 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-9l5g9_kube-system(f2152eb1-3ffc-418b-80cb-f2d468160f26)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-9l5g9_kube-system(f2152eb1-3ffc-418b-80cb-f2d468160f26)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-9l5g9" podUID="f2152eb1-3ffc-418b-80cb-f2d468160f26" Jul 14 22:14:15.755826 env[1215]: time="2025-07-14T22:14:15.755775421Z" level=error msg="Failed to destroy network for sandbox \"e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:15.756149 env[1215]: time="2025-07-14T22:14:15.756117296Z" level=error msg="encountered an error cleaning up failed sandbox \"e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:15.756201 env[1215]: time="2025-07-14T22:14:15.756171941Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-74cfd4cbdb-6xqzx,Uid:1b6ea792-b855-4382-96d6-ba04817e00fd,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:15.756766 kubelet[2006]: E0714 22:14:15.756357 2006 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:15.756766 kubelet[2006]: E0714 22:14:15.756408 2006 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-74cfd4cbdb-6xqzx" Jul 14 22:14:15.756766 kubelet[2006]: E0714 22:14:15.756426 2006 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-74cfd4cbdb-6xqzx" Jul 14 22:14:15.756940 kubelet[2006]: E0714 22:14:15.756477 2006 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-74cfd4cbdb-6xqzx_calico-apiserver(1b6ea792-b855-4382-96d6-ba04817e00fd)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-74cfd4cbdb-6xqzx_calico-apiserver(1b6ea792-b855-4382-96d6-ba04817e00fd)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-74cfd4cbdb-6xqzx" podUID="1b6ea792-b855-4382-96d6-ba04817e00fd" Jul 14 22:14:15.765970 env[1215]: time="2025-07-14T22:14:15.765916926Z" level=error msg="Failed to destroy network for sandbox \"d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:15.766308 env[1215]: time="2025-07-14T22:14:15.766263601Z" level=error msg="encountered an error cleaning up failed sandbox \"d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:15.766363 env[1215]: time="2025-07-14T22:14:15.766323167Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-5p6rx,Uid:315abcdd-d782-4be2-bcc4-f381a2f1b50e,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:15.766551 kubelet[2006]: E0714 22:14:15.766505 2006 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:15.766622 kubelet[2006]: E0714 22:14:15.766565 2006 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-5p6rx" Jul 14 22:14:15.766622 kubelet[2006]: E0714 22:14:15.766584 2006 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-5p6rx" Jul 14 22:14:15.766678 kubelet[2006]: E0714 22:14:15.766628 2006 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-5p6rx_kube-system(315abcdd-d782-4be2-bcc4-f381a2f1b50e)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-5p6rx_kube-system(315abcdd-d782-4be2-bcc4-f381a2f1b50e)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-5p6rx" podUID="315abcdd-d782-4be2-bcc4-f381a2f1b50e" Jul 14 22:14:15.772155 env[1215]: time="2025-07-14T22:14:15.772104552Z" level=error msg="Failed to destroy network for sandbox \"06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:15.772486 env[1215]: time="2025-07-14T22:14:15.772446106Z" level=error msg="encountered an error cleaning up failed sandbox \"06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:15.772530 env[1215]: time="2025-07-14T22:14:15.772505192Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7967ff6466-rsxkv,Uid:d1ed8c37-1b24-429a-ae6d-4e451008faeb,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:15.772711 kubelet[2006]: E0714 22:14:15.772680 2006 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:15.772769 kubelet[2006]: E0714 22:14:15.772742 2006 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-7967ff6466-rsxkv" Jul 14 22:14:15.772813 kubelet[2006]: E0714 22:14:15.772774 2006 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-7967ff6466-rsxkv" Jul 14 22:14:15.772844 kubelet[2006]: E0714 22:14:15.772820 2006 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-7967ff6466-rsxkv_calico-system(d1ed8c37-1b24-429a-ae6d-4e451008faeb)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-7967ff6466-rsxkv_calico-system(d1ed8c37-1b24-429a-ae6d-4e451008faeb)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-7967ff6466-rsxkv" podUID="d1ed8c37-1b24-429a-ae6d-4e451008faeb" Jul 14 22:14:15.774440 env[1215]: time="2025-07-14T22:14:15.774268170Z" level=error msg="Failed to destroy network for sandbox \"bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:15.774765 env[1215]: time="2025-07-14T22:14:15.774734377Z" level=error msg="encountered an error cleaning up failed sandbox \"bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:15.775368 env[1215]: time="2025-07-14T22:14:15.775249990Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-cszg5,Uid:873b6b5c-5253-4b84-b586-5af9f7e09daa,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:15.775610 kubelet[2006]: E0714 22:14:15.775521 2006 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:15.775610 kubelet[2006]: E0714 22:14:15.775562 2006 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-cszg5" Jul 14 22:14:15.775610 kubelet[2006]: E0714 22:14:15.775580 2006 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-cszg5" Jul 14 22:14:15.775737 kubelet[2006]: E0714 22:14:15.775628 2006 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-768f4c5c69-cszg5_calico-system(873b6b5c-5253-4b84-b586-5af9f7e09daa)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-768f4c5c69-cszg5_calico-system(873b6b5c-5253-4b84-b586-5af9f7e09daa)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-cszg5" podUID="873b6b5c-5253-4b84-b586-5af9f7e09daa" Jul 14 22:14:15.781766 env[1215]: time="2025-07-14T22:14:15.781695801Z" level=error msg="Failed to destroy network for sandbox \"b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:15.782266 env[1215]: time="2025-07-14T22:14:15.782230655Z" level=error msg="encountered an error cleaning up failed sandbox \"b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:15.782392 env[1215]: time="2025-07-14T22:14:15.782364028Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-88b4685f-k9zr5,Uid:bb8a40bd-e0ea-46bb-aab7-968e8d6511da,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:15.782659 kubelet[2006]: E0714 22:14:15.782628 2006 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:15.782747 kubelet[2006]: E0714 22:14:15.782673 2006 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-88b4685f-k9zr5" Jul 14 22:14:15.782747 kubelet[2006]: E0714 22:14:15.782690 2006 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-88b4685f-k9zr5" Jul 14 22:14:15.782818 kubelet[2006]: E0714 22:14:15.782766 2006 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-88b4685f-k9zr5_calico-system(bb8a40bd-e0ea-46bb-aab7-968e8d6511da)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-88b4685f-k9zr5_calico-system(bb8a40bd-e0ea-46bb-aab7-968e8d6511da)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-88b4685f-k9zr5" podUID="bb8a40bd-e0ea-46bb-aab7-968e8d6511da" Jul 14 22:14:15.785604 env[1215]: time="2025-07-14T22:14:15.785569352Z" level=error msg="Failed to destroy network for sandbox \"b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:15.785912 env[1215]: time="2025-07-14T22:14:15.785880144Z" level=error msg="encountered an error cleaning up failed sandbox \"b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:15.785964 env[1215]: time="2025-07-14T22:14:15.785932309Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-74cfd4cbdb-f9z8h,Uid:a309be2c-e649-4b80-9723-4bb86fe0fdd0,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:15.786110 kubelet[2006]: E0714 22:14:15.786081 2006 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:15.786154 kubelet[2006]: E0714 22:14:15.786119 2006 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-74cfd4cbdb-f9z8h" Jul 14 22:14:15.786154 kubelet[2006]: E0714 22:14:15.786137 2006 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-74cfd4cbdb-f9z8h" Jul 14 22:14:15.786264 kubelet[2006]: E0714 22:14:15.786175 2006 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-74cfd4cbdb-f9z8h_calico-apiserver(a309be2c-e649-4b80-9723-4bb86fe0fdd0)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-74cfd4cbdb-f9z8h_calico-apiserver(a309be2c-e649-4b80-9723-4bb86fe0fdd0)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-74cfd4cbdb-f9z8h" podUID="a309be2c-e649-4b80-9723-4bb86fe0fdd0" Jul 14 22:14:16.056581 kubelet[2006]: I0714 22:14:16.056016 2006 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" Jul 14 22:14:16.057129 env[1215]: time="2025-07-14T22:14:16.057090663Z" level=info msg="StopPodSandbox for \"bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30\"" Jul 14 22:14:16.059686 kubelet[2006]: I0714 22:14:16.058403 2006 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" Jul 14 22:14:16.059796 env[1215]: time="2025-07-14T22:14:16.058952249Z" level=info msg="StopPodSandbox for \"06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61\"" Jul 14 22:14:16.062638 kubelet[2006]: I0714 22:14:16.062609 2006 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" Jul 14 22:14:16.063147 env[1215]: time="2025-07-14T22:14:16.063119546Z" level=info msg="StopPodSandbox for \"d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6\"" Jul 14 22:14:16.064879 kubelet[2006]: I0714 22:14:16.063933 2006 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" Jul 14 22:14:16.064975 env[1215]: time="2025-07-14T22:14:16.064359191Z" level=info msg="StopPodSandbox for \"b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0\"" Jul 14 22:14:16.065837 kubelet[2006]: I0714 22:14:16.065398 2006 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" Jul 14 22:14:16.065911 env[1215]: time="2025-07-14T22:14:16.065880223Z" level=info msg="StopPodSandbox for \"41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2\"" Jul 14 22:14:16.066339 kubelet[2006]: I0714 22:14:16.066294 2006 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" Jul 14 22:14:16.066959 env[1215]: time="2025-07-14T22:14:16.066924808Z" level=info msg="StopPodSandbox for \"b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff\"" Jul 14 22:14:16.067854 kubelet[2006]: I0714 22:14:16.067827 2006 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" Jul 14 22:14:16.068326 env[1215]: time="2025-07-14T22:14:16.068268222Z" level=info msg="StopPodSandbox for \"e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31\"" Jul 14 22:14:16.091548 env[1215]: time="2025-07-14T22:14:16.091477707Z" level=error msg="StopPodSandbox for \"bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30\" failed" error="failed to destroy network for sandbox \"bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:16.092001 kubelet[2006]: E0714 22:14:16.091951 2006 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" Jul 14 22:14:16.093346 kubelet[2006]: E0714 22:14:16.093281 2006 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30"} Jul 14 22:14:16.093446 kubelet[2006]: E0714 22:14:16.093368 2006 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"873b6b5c-5253-4b84-b586-5af9f7e09daa\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 22:14:16.093446 kubelet[2006]: E0714 22:14:16.093392 2006 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"873b6b5c-5253-4b84-b586-5af9f7e09daa\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-cszg5" podUID="873b6b5c-5253-4b84-b586-5af9f7e09daa" Jul 14 22:14:16.118548 env[1215]: time="2025-07-14T22:14:16.118476291Z" level=error msg="StopPodSandbox for \"b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0\" failed" error="failed to destroy network for sandbox \"b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:16.118782 kubelet[2006]: E0714 22:14:16.118740 2006 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" Jul 14 22:14:16.118851 kubelet[2006]: E0714 22:14:16.118792 2006 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0"} Jul 14 22:14:16.118851 kubelet[2006]: E0714 22:14:16.118825 2006 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a309be2c-e649-4b80-9723-4bb86fe0fdd0\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 22:14:16.118946 kubelet[2006]: E0714 22:14:16.118849 2006 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a309be2c-e649-4b80-9723-4bb86fe0fdd0\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-74cfd4cbdb-f9z8h" podUID="a309be2c-e649-4b80-9723-4bb86fe0fdd0" Jul 14 22:14:16.123519 env[1215]: time="2025-07-14T22:14:16.123455590Z" level=error msg="StopPodSandbox for \"e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31\" failed" error="failed to destroy network for sandbox \"e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:16.123746 kubelet[2006]: E0714 22:14:16.123695 2006 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" Jul 14 22:14:16.123827 kubelet[2006]: E0714 22:14:16.123759 2006 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31"} Jul 14 22:14:16.123827 kubelet[2006]: E0714 22:14:16.123791 2006 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"1b6ea792-b855-4382-96d6-ba04817e00fd\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 22:14:16.123827 kubelet[2006]: E0714 22:14:16.123813 2006 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"1b6ea792-b855-4382-96d6-ba04817e00fd\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-74cfd4cbdb-6xqzx" podUID="1b6ea792-b855-4382-96d6-ba04817e00fd" Jul 14 22:14:16.130156 env[1215]: time="2025-07-14T22:14:16.130098615Z" level=error msg="StopPodSandbox for \"d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6\" failed" error="failed to destroy network for sandbox \"d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:16.130412 kubelet[2006]: E0714 22:14:16.130340 2006 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" Jul 14 22:14:16.130510 kubelet[2006]: E0714 22:14:16.130429 2006 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6"} Jul 14 22:14:16.130510 kubelet[2006]: E0714 22:14:16.130464 2006 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"315abcdd-d782-4be2-bcc4-f381a2f1b50e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 22:14:16.130510 kubelet[2006]: E0714 22:14:16.130485 2006 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"315abcdd-d782-4be2-bcc4-f381a2f1b50e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-5p6rx" podUID="315abcdd-d782-4be2-bcc4-f381a2f1b50e" Jul 14 22:14:16.136893 env[1215]: time="2025-07-14T22:14:16.136833930Z" level=error msg="StopPodSandbox for \"06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61\" failed" error="failed to destroy network for sandbox \"06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:16.137051 env[1215]: time="2025-07-14T22:14:16.137000546Z" level=error msg="StopPodSandbox for \"41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2\" failed" error="failed to destroy network for sandbox \"41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:16.137111 kubelet[2006]: E0714 22:14:16.137072 2006 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" Jul 14 22:14:16.137163 kubelet[2006]: E0714 22:14:16.137124 2006 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61"} Jul 14 22:14:16.137190 kubelet[2006]: E0714 22:14:16.137159 2006 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d1ed8c37-1b24-429a-ae6d-4e451008faeb\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 22:14:16.137190 kubelet[2006]: E0714 22:14:16.137163 2006 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" Jul 14 22:14:16.137273 kubelet[2006]: E0714 22:14:16.137207 2006 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2"} Jul 14 22:14:16.137273 kubelet[2006]: E0714 22:14:16.137234 2006 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"f2152eb1-3ffc-418b-80cb-f2d468160f26\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 22:14:16.137273 kubelet[2006]: E0714 22:14:16.137180 2006 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d1ed8c37-1b24-429a-ae6d-4e451008faeb\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-7967ff6466-rsxkv" podUID="d1ed8c37-1b24-429a-ae6d-4e451008faeb" Jul 14 22:14:16.137273 kubelet[2006]: E0714 22:14:16.137253 2006 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"f2152eb1-3ffc-418b-80cb-f2d468160f26\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-9l5g9" podUID="f2152eb1-3ffc-418b-80cb-f2d468160f26" Jul 14 22:14:16.140167 env[1215]: time="2025-07-14T22:14:16.140102857Z" level=error msg="StopPodSandbox for \"b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff\" failed" error="failed to destroy network for sandbox \"b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:16.140834 kubelet[2006]: E0714 22:14:16.140291 2006 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" Jul 14 22:14:16.140883 kubelet[2006]: E0714 22:14:16.140855 2006 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff"} Jul 14 22:14:16.140919 kubelet[2006]: E0714 22:14:16.140884 2006 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"bb8a40bd-e0ea-46bb-aab7-968e8d6511da\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 22:14:16.140919 kubelet[2006]: E0714 22:14:16.140904 2006 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"bb8a40bd-e0ea-46bb-aab7-968e8d6511da\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-88b4685f-k9zr5" podUID="bb8a40bd-e0ea-46bb-aab7-968e8d6511da" Jul 14 22:14:16.325008 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0-shm.mount: Deactivated successfully. Jul 14 22:14:16.325095 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61-shm.mount: Deactivated successfully. Jul 14 22:14:16.985549 systemd[1]: Created slice kubepods-besteffort-pod75f4d0f5_72b9_47b9_a4f2_494a583825cc.slice. Jul 14 22:14:16.988092 env[1215]: time="2025-07-14T22:14:16.988053268Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-5sk6s,Uid:75f4d0f5-72b9-47b9-a4f2-494a583825cc,Namespace:calico-system,Attempt:0,}" Jul 14 22:14:17.045976 env[1215]: time="2025-07-14T22:14:17.045914545Z" level=error msg="Failed to destroy network for sandbox \"0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:17.048230 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199-shm.mount: Deactivated successfully. Jul 14 22:14:17.049801 env[1215]: time="2025-07-14T22:14:17.049760047Z" level=error msg="encountered an error cleaning up failed sandbox \"0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:17.049953 env[1215]: time="2025-07-14T22:14:17.049921583Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-5sk6s,Uid:75f4d0f5-72b9-47b9-a4f2-494a583825cc,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:17.050753 kubelet[2006]: E0714 22:14:17.050262 2006 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:17.050753 kubelet[2006]: E0714 22:14:17.050325 2006 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-5sk6s" Jul 14 22:14:17.050753 kubelet[2006]: E0714 22:14:17.050373 2006 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-5sk6s" Jul 14 22:14:17.050927 kubelet[2006]: E0714 22:14:17.050435 2006 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-5sk6s_calico-system(75f4d0f5-72b9-47b9-a4f2-494a583825cc)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-5sk6s_calico-system(75f4d0f5-72b9-47b9-a4f2-494a583825cc)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-5sk6s" podUID="75f4d0f5-72b9-47b9-a4f2-494a583825cc" Jul 14 22:14:17.070545 kubelet[2006]: I0714 22:14:17.070516 2006 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" Jul 14 22:14:17.072225 env[1215]: time="2025-07-14T22:14:17.072195435Z" level=info msg="StopPodSandbox for \"0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199\"" Jul 14 22:14:17.095462 env[1215]: time="2025-07-14T22:14:17.095407020Z" level=error msg="StopPodSandbox for \"0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199\" failed" error="failed to destroy network for sandbox \"0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:14:17.095792 kubelet[2006]: E0714 22:14:17.095750 2006 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" Jul 14 22:14:17.095860 kubelet[2006]: E0714 22:14:17.095816 2006 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199"} Jul 14 22:14:17.095860 kubelet[2006]: E0714 22:14:17.095852 2006 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"75f4d0f5-72b9-47b9-a4f2-494a583825cc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 22:14:17.095946 kubelet[2006]: E0714 22:14:17.095884 2006 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"75f4d0f5-72b9-47b9-a4f2-494a583825cc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-5sk6s" podUID="75f4d0f5-72b9-47b9-a4f2-494a583825cc" Jul 14 22:14:19.673446 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2458642115.mount: Deactivated successfully. Jul 14 22:14:19.921106 env[1215]: time="2025-07-14T22:14:19.921049011Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:19.922501 env[1215]: time="2025-07-14T22:14:19.922471149Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:19.924237 env[1215]: time="2025-07-14T22:14:19.923931403Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:19.925261 env[1215]: time="2025-07-14T22:14:19.925236992Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:19.925659 env[1215]: time="2025-07-14T22:14:19.925630673Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9\"" Jul 14 22:14:19.938239 env[1215]: time="2025-07-14T22:14:19.938199014Z" level=info msg="CreateContainer within sandbox \"a7765f720bf0e17c7fe43c2463d43336ef873ffd73601c000651d042d4727d4a\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 14 22:14:19.949749 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2359706130.mount: Deactivated successfully. Jul 14 22:14:19.950467 env[1215]: time="2025-07-14T22:14:19.950422870Z" level=info msg="CreateContainer within sandbox \"a7765f720bf0e17c7fe43c2463d43336ef873ffd73601c000651d042d4727d4a\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"1c920b399933298355f3dd8a79483df44bb02571c7ea5054c150b80d2ba7f227\"" Jul 14 22:14:19.951960 env[1215]: time="2025-07-14T22:14:19.951927159Z" level=info msg="StartContainer for \"1c920b399933298355f3dd8a79483df44bb02571c7ea5054c150b80d2ba7f227\"" Jul 14 22:14:19.966767 systemd[1]: Started cri-containerd-1c920b399933298355f3dd8a79483df44bb02571c7ea5054c150b80d2ba7f227.scope. Jul 14 22:14:20.005000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.008890 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 14 22:14:20.008947 kernel: audit: type=1400 audit(1752531260.005:1012): avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.008973 kernel: audit: type=1300 audit(1752531260.005:1012): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2537 pid=3196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:20.005000 audit[3196]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2537 pid=3196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:20.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163393230623339393933333239383335356633646438613739343833 Jul 14 22:14:20.015849 kernel: audit: type=1327 audit(1752531260.005:1012): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163393230623339393933333239383335356633646438613739343833 Jul 14 22:14:20.015979 kernel: audit: type=1400 audit(1752531260.005:1013): avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.005000 audit[3196]: AVC avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.005000 audit[3196]: AVC avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.020974 kernel: audit: type=1400 audit(1752531260.005:1013): avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.005000 audit[3196]: AVC avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.023835 kernel: audit: type=1400 audit(1752531260.005:1013): avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.005000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.026979 kernel: audit: type=1400 audit(1752531260.005:1013): avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.027055 kernel: audit: type=1400 audit(1752531260.005:1013): avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.005000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.005000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.031896 kernel: audit: type=1400 audit(1752531260.005:1013): avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.034759 kernel: audit: type=1400 audit(1752531260.005:1013): avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.005000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.005000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.005000 audit[3196]: AVC avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.005000 audit[3196]: AVC avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.005000 audit: BPF prog-id=139 op=LOAD Jul 14 22:14:20.005000 audit[3196]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2537 pid=3196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:20.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163393230623339393933333239383335356633646438613739343833 Jul 14 22:14:20.005000 audit[3196]: AVC avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.005000 audit[3196]: AVC avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.005000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.005000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.005000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.005000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.005000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.005000 audit[3196]: AVC avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.005000 audit[3196]: AVC avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.005000 audit: BPF prog-id=140 op=LOAD Jul 14 22:14:20.005000 audit[3196]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2537 pid=3196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:20.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163393230623339393933333239383335356633646438613739343833 Jul 14 22:14:20.008000 audit: BPF prog-id=140 op=UNLOAD Jul 14 22:14:20.008000 audit: BPF prog-id=139 op=UNLOAD Jul 14 22:14:20.008000 audit[3196]: AVC avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.008000 audit[3196]: AVC avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.008000 audit[3196]: AVC avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.008000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.008000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.008000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.008000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.008000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.008000 audit[3196]: AVC avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.008000 audit[3196]: AVC avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:20.008000 audit: BPF prog-id=141 op=LOAD Jul 14 22:14:20.008000 audit[3196]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2537 pid=3196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:20.008000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163393230623339393933333239383335356633646438613739343833 Jul 14 22:14:20.047649 env[1215]: time="2025-07-14T22:14:20.047606499Z" level=info msg="StartContainer for \"1c920b399933298355f3dd8a79483df44bb02571c7ea5054c150b80d2ba7f227\" returns successfully" Jul 14 22:14:20.090711 kubelet[2006]: I0714 22:14:20.090647 2006 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-zlqsg" podStartSLOduration=1.073662031 podStartE2EDuration="12.090633453s" podCreationTimestamp="2025-07-14 22:14:08 +0000 UTC" firstStartedPulling="2025-07-14 22:14:08.909427534 +0000 UTC m=+25.024601179" lastFinishedPulling="2025-07-14 22:14:19.926398956 +0000 UTC m=+36.041572601" observedRunningTime="2025-07-14 22:14:20.089634788 +0000 UTC m=+36.204808433" watchObservedRunningTime="2025-07-14 22:14:20.090633453 +0000 UTC m=+36.205807098" Jul 14 22:14:20.235426 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 14 22:14:20.235535 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 14 22:14:20.332017 env[1215]: time="2025-07-14T22:14:20.331973255Z" level=info msg="StopPodSandbox for \"06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61\"" Jul 14 22:14:20.572452 env[1215]: 2025-07-14 22:14:20.435 [INFO][3252] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" Jul 14 22:14:20.572452 env[1215]: 2025-07-14 22:14:20.435 [INFO][3252] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" iface="eth0" netns="/var/run/netns/cni-16649a38-0893-f9a3-7127-4114b87c477e" Jul 14 22:14:20.572452 env[1215]: 2025-07-14 22:14:20.437 [INFO][3252] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" iface="eth0" netns="/var/run/netns/cni-16649a38-0893-f9a3-7127-4114b87c477e" Jul 14 22:14:20.572452 env[1215]: 2025-07-14 22:14:20.437 [INFO][3252] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" iface="eth0" netns="/var/run/netns/cni-16649a38-0893-f9a3-7127-4114b87c477e" Jul 14 22:14:20.572452 env[1215]: 2025-07-14 22:14:20.437 [INFO][3252] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" Jul 14 22:14:20.572452 env[1215]: 2025-07-14 22:14:20.437 [INFO][3252] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" Jul 14 22:14:20.572452 env[1215]: 2025-07-14 22:14:20.550 [INFO][3261] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" HandleID="k8s-pod-network.06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" Workload="localhost-k8s-whisker--7967ff6466--rsxkv-eth0" Jul 14 22:14:20.572452 env[1215]: 2025-07-14 22:14:20.551 [INFO][3261] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:20.572452 env[1215]: 2025-07-14 22:14:20.551 [INFO][3261] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:20.572452 env[1215]: 2025-07-14 22:14:20.560 [WARNING][3261] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" HandleID="k8s-pod-network.06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" Workload="localhost-k8s-whisker--7967ff6466--rsxkv-eth0" Jul 14 22:14:20.572452 env[1215]: 2025-07-14 22:14:20.560 [INFO][3261] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" HandleID="k8s-pod-network.06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" Workload="localhost-k8s-whisker--7967ff6466--rsxkv-eth0" Jul 14 22:14:20.572452 env[1215]: 2025-07-14 22:14:20.562 [INFO][3261] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:20.572452 env[1215]: 2025-07-14 22:14:20.569 [INFO][3252] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" Jul 14 22:14:20.572965 env[1215]: time="2025-07-14T22:14:20.572573686Z" level=info msg="TearDown network for sandbox \"06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61\" successfully" Jul 14 22:14:20.572965 env[1215]: time="2025-07-14T22:14:20.572603203Z" level=info msg="StopPodSandbox for \"06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61\" returns successfully" Jul 14 22:14:20.639629 kubelet[2006]: I0714 22:14:20.639513 2006 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-plwwg\" (UniqueName: \"kubernetes.io/projected/d1ed8c37-1b24-429a-ae6d-4e451008faeb-kube-api-access-plwwg\") pod \"d1ed8c37-1b24-429a-ae6d-4e451008faeb\" (UID: \"d1ed8c37-1b24-429a-ae6d-4e451008faeb\") " Jul 14 22:14:20.639629 kubelet[2006]: I0714 22:14:20.639557 2006 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d1ed8c37-1b24-429a-ae6d-4e451008faeb-whisker-ca-bundle\") pod \"d1ed8c37-1b24-429a-ae6d-4e451008faeb\" (UID: \"d1ed8c37-1b24-429a-ae6d-4e451008faeb\") " Jul 14 22:14:20.639629 kubelet[2006]: I0714 22:14:20.639587 2006 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/d1ed8c37-1b24-429a-ae6d-4e451008faeb-whisker-backend-key-pair\") pod \"d1ed8c37-1b24-429a-ae6d-4e451008faeb\" (UID: \"d1ed8c37-1b24-429a-ae6d-4e451008faeb\") " Jul 14 22:14:20.649056 kubelet[2006]: I0714 22:14:20.649014 2006 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/d1ed8c37-1b24-429a-ae6d-4e451008faeb-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "d1ed8c37-1b24-429a-ae6d-4e451008faeb" (UID: "d1ed8c37-1b24-429a-ae6d-4e451008faeb"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Jul 14 22:14:20.649188 kubelet[2006]: I0714 22:14:20.649026 2006 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/d1ed8c37-1b24-429a-ae6d-4e451008faeb-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "d1ed8c37-1b24-429a-ae6d-4e451008faeb" (UID: "d1ed8c37-1b24-429a-ae6d-4e451008faeb"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 14 22:14:20.649917 kubelet[2006]: I0714 22:14:20.649884 2006 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/d1ed8c37-1b24-429a-ae6d-4e451008faeb-kube-api-access-plwwg" (OuterVolumeSpecName: "kube-api-access-plwwg") pod "d1ed8c37-1b24-429a-ae6d-4e451008faeb" (UID: "d1ed8c37-1b24-429a-ae6d-4e451008faeb"). InnerVolumeSpecName "kube-api-access-plwwg". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 14 22:14:20.677860 systemd[1]: run-netns-cni\x2d16649a38\x2d0893\x2df9a3\x2d7127\x2d4114b87c477e.mount: Deactivated successfully. Jul 14 22:14:20.678219 systemd[1]: var-lib-kubelet-pods-d1ed8c37\x2d1b24\x2d429a\x2dae6d\x2d4e451008faeb-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dplwwg.mount: Deactivated successfully. Jul 14 22:14:20.678375 systemd[1]: var-lib-kubelet-pods-d1ed8c37\x2d1b24\x2d429a\x2dae6d\x2d4e451008faeb-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 14 22:14:20.739848 kubelet[2006]: I0714 22:14:20.739810 2006 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/d1ed8c37-1b24-429a-ae6d-4e451008faeb-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 14 22:14:20.739848 kubelet[2006]: I0714 22:14:20.739839 2006 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-plwwg\" (UniqueName: \"kubernetes.io/projected/d1ed8c37-1b24-429a-ae6d-4e451008faeb-kube-api-access-plwwg\") on node \"localhost\" DevicePath \"\"" Jul 14 22:14:20.739848 kubelet[2006]: I0714 22:14:20.739848 2006 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d1ed8c37-1b24-429a-ae6d-4e451008faeb-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 14 22:14:21.078660 kubelet[2006]: I0714 22:14:21.078624 2006 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 22:14:21.082481 systemd[1]: Removed slice kubepods-besteffort-podd1ed8c37_1b24_429a_ae6d_4e451008faeb.slice. Jul 14 22:14:21.237110 systemd[1]: Created slice kubepods-besteffort-poda17ee04d_1f82_4aca_a5dc_8bf34e389047.slice. Jul 14 22:14:21.241997 kubelet[2006]: I0714 22:14:21.241952 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-s5q77\" (UniqueName: \"kubernetes.io/projected/a17ee04d-1f82-4aca-a5dc-8bf34e389047-kube-api-access-s5q77\") pod \"whisker-5688bf7d58-r8mn4\" (UID: \"a17ee04d-1f82-4aca-a5dc-8bf34e389047\") " pod="calico-system/whisker-5688bf7d58-r8mn4" Jul 14 22:14:21.241997 kubelet[2006]: I0714 22:14:21.242001 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/a17ee04d-1f82-4aca-a5dc-8bf34e389047-whisker-ca-bundle\") pod \"whisker-5688bf7d58-r8mn4\" (UID: \"a17ee04d-1f82-4aca-a5dc-8bf34e389047\") " pod="calico-system/whisker-5688bf7d58-r8mn4" Jul 14 22:14:21.242305 kubelet[2006]: I0714 22:14:21.242024 2006 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/a17ee04d-1f82-4aca-a5dc-8bf34e389047-whisker-backend-key-pair\") pod \"whisker-5688bf7d58-r8mn4\" (UID: \"a17ee04d-1f82-4aca-a5dc-8bf34e389047\") " pod="calico-system/whisker-5688bf7d58-r8mn4" Jul 14 22:14:21.539888 env[1215]: time="2025-07-14T22:14:21.539846700Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5688bf7d58-r8mn4,Uid:a17ee04d-1f82-4aca-a5dc-8bf34e389047,Namespace:calico-system,Attempt:0,}" Jul 14 22:14:21.622000 audit[3364]: AVC avc: denied { write } for pid=3364 comm="tee" name="fd" dev="proc" ino=19925 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 22:14:21.622000 audit[3364]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe761d7e1 a2=241 a3=1b6 items=1 ppid=3324 pid=3364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:21.622000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 14 22:14:21.622000 audit: PATH item=0 name="/dev/fd/63" inode=18972 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:14:21.622000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 22:14:21.625000 audit[3372]: AVC avc: denied { write } for pid=3372 comm="tee" name="fd" dev="proc" ino=19929 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 22:14:21.625000 audit[3372]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffde19f7e3 a2=241 a3=1b6 items=1 ppid=3319 pid=3372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:21.625000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 14 22:14:21.625000 audit: PATH item=0 name="/dev/fd/63" inode=17245 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:14:21.625000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 22:14:21.630000 audit[3375]: AVC avc: denied { write } for pid=3375 comm="tee" name="fd" dev="proc" ino=19933 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 22:14:21.630000 audit[3375]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffcb4f47e1 a2=241 a3=1b6 items=1 ppid=3322 pid=3375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:21.630000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 14 22:14:21.630000 audit: PATH item=0 name="/dev/fd/63" inode=20629 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:14:21.630000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 22:14:21.632000 audit[3355]: AVC avc: denied { write } for pid=3355 comm="tee" name="fd" dev="proc" ino=20632 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 22:14:21.632000 audit[3355]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffcf12f7e2 a2=241 a3=1b6 items=1 ppid=3315 pid=3355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:21.632000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 14 22:14:21.632000 audit: PATH item=0 name="/dev/fd/63" inode=19917 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:14:21.632000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 22:14:21.634000 audit[3383]: AVC avc: denied { write } for pid=3383 comm="tee" name="fd" dev="proc" ino=19939 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 22:14:21.634000 audit[3383]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff0f0c7e1 a2=241 a3=1b6 items=1 ppid=3326 pid=3383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:21.634000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 14 22:14:21.634000 audit: PATH item=0 name="/dev/fd/63" inode=18976 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:14:21.634000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 22:14:21.636000 audit[3387]: AVC avc: denied { write } for pid=3387 comm="tee" name="fd" dev="proc" ino=19943 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 22:14:21.636000 audit[3387]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffdbd567d2 a2=241 a3=1b6 items=1 ppid=3329 pid=3387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:21.636000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 14 22:14:21.636000 audit: PATH item=0 name="/dev/fd/63" inode=17246 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:14:21.636000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 22:14:21.665000 audit[3393]: AVC avc: denied { write } for pid=3393 comm="tee" name="fd" dev="proc" ino=19949 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 22:14:21.665000 audit[3393]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc8bf97d1 a2=241 a3=1b6 items=1 ppid=3314 pid=3393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:21.665000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 14 22:14:21.665000 audit: PATH item=0 name="/dev/fd/63" inode=18979 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:14:21.665000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 22:14:21.685986 systemd-networkd[1039]: cali44d49bc65c5: Link UP Jul 14 22:14:21.688720 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 14 22:14:21.688816 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali44d49bc65c5: link becomes ready Jul 14 22:14:21.689290 systemd-networkd[1039]: cali44d49bc65c5: Gained carrier Jul 14 22:14:21.709002 env[1215]: 2025-07-14 22:14:21.569 [INFO][3284] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 14 22:14:21.709002 env[1215]: 2025-07-14 22:14:21.583 [INFO][3284] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--5688bf7d58--r8mn4-eth0 whisker-5688bf7d58- calico-system a17ee04d-1f82-4aca-a5dc-8bf34e389047 906 0 2025-07-14 22:14:21 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:5688bf7d58 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-5688bf7d58-r8mn4 eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali44d49bc65c5 [] [] }} ContainerID="53f1812642b0984d80f9ddb527f72ab414bda79f2e0510d6abd82905ba026784" Namespace="calico-system" Pod="whisker-5688bf7d58-r8mn4" WorkloadEndpoint="localhost-k8s-whisker--5688bf7d58--r8mn4-" Jul 14 22:14:21.709002 env[1215]: 2025-07-14 22:14:21.583 [INFO][3284] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="53f1812642b0984d80f9ddb527f72ab414bda79f2e0510d6abd82905ba026784" Namespace="calico-system" Pod="whisker-5688bf7d58-r8mn4" WorkloadEndpoint="localhost-k8s-whisker--5688bf7d58--r8mn4-eth0" Jul 14 22:14:21.709002 env[1215]: 2025-07-14 22:14:21.615 [INFO][3298] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="53f1812642b0984d80f9ddb527f72ab414bda79f2e0510d6abd82905ba026784" HandleID="k8s-pod-network.53f1812642b0984d80f9ddb527f72ab414bda79f2e0510d6abd82905ba026784" Workload="localhost-k8s-whisker--5688bf7d58--r8mn4-eth0" Jul 14 22:14:21.709002 env[1215]: 2025-07-14 22:14:21.615 [INFO][3298] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="53f1812642b0984d80f9ddb527f72ab414bda79f2e0510d6abd82905ba026784" HandleID="k8s-pod-network.53f1812642b0984d80f9ddb527f72ab414bda79f2e0510d6abd82905ba026784" Workload="localhost-k8s-whisker--5688bf7d58--r8mn4-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000137750), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-5688bf7d58-r8mn4", "timestamp":"2025-07-14 22:14:21.615302833 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 22:14:21.709002 env[1215]: 2025-07-14 22:14:21.615 [INFO][3298] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:21.709002 env[1215]: 2025-07-14 22:14:21.615 [INFO][3298] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:21.709002 env[1215]: 2025-07-14 22:14:21.615 [INFO][3298] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 22:14:21.709002 env[1215]: 2025-07-14 22:14:21.629 [INFO][3298] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.53f1812642b0984d80f9ddb527f72ab414bda79f2e0510d6abd82905ba026784" host="localhost" Jul 14 22:14:21.709002 env[1215]: 2025-07-14 22:14:21.646 [INFO][3298] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 22:14:21.709002 env[1215]: 2025-07-14 22:14:21.651 [INFO][3298] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 22:14:21.709002 env[1215]: 2025-07-14 22:14:21.657 [INFO][3298] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 22:14:21.709002 env[1215]: 2025-07-14 22:14:21.659 [INFO][3298] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 22:14:21.709002 env[1215]: 2025-07-14 22:14:21.659 [INFO][3298] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.53f1812642b0984d80f9ddb527f72ab414bda79f2e0510d6abd82905ba026784" host="localhost" Jul 14 22:14:21.709002 env[1215]: 2025-07-14 22:14:21.661 [INFO][3298] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.53f1812642b0984d80f9ddb527f72ab414bda79f2e0510d6abd82905ba026784 Jul 14 22:14:21.709002 env[1215]: 2025-07-14 22:14:21.665 [INFO][3298] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.53f1812642b0984d80f9ddb527f72ab414bda79f2e0510d6abd82905ba026784" host="localhost" Jul 14 22:14:21.709002 env[1215]: 2025-07-14 22:14:21.670 [INFO][3298] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.53f1812642b0984d80f9ddb527f72ab414bda79f2e0510d6abd82905ba026784" host="localhost" Jul 14 22:14:21.709002 env[1215]: 2025-07-14 22:14:21.670 [INFO][3298] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.53f1812642b0984d80f9ddb527f72ab414bda79f2e0510d6abd82905ba026784" host="localhost" Jul 14 22:14:21.709002 env[1215]: 2025-07-14 22:14:21.670 [INFO][3298] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:21.709002 env[1215]: 2025-07-14 22:14:21.670 [INFO][3298] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="53f1812642b0984d80f9ddb527f72ab414bda79f2e0510d6abd82905ba026784" HandleID="k8s-pod-network.53f1812642b0984d80f9ddb527f72ab414bda79f2e0510d6abd82905ba026784" Workload="localhost-k8s-whisker--5688bf7d58--r8mn4-eth0" Jul 14 22:14:21.709761 env[1215]: 2025-07-14 22:14:21.674 [INFO][3284] cni-plugin/k8s.go 418: Populated endpoint ContainerID="53f1812642b0984d80f9ddb527f72ab414bda79f2e0510d6abd82905ba026784" Namespace="calico-system" Pod="whisker-5688bf7d58-r8mn4" WorkloadEndpoint="localhost-k8s-whisker--5688bf7d58--r8mn4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--5688bf7d58--r8mn4-eth0", GenerateName:"whisker-5688bf7d58-", Namespace:"calico-system", SelfLink:"", UID:"a17ee04d-1f82-4aca-a5dc-8bf34e389047", ResourceVersion:"906", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 14, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"5688bf7d58", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-5688bf7d58-r8mn4", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali44d49bc65c5", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:21.709761 env[1215]: 2025-07-14 22:14:21.675 [INFO][3284] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="53f1812642b0984d80f9ddb527f72ab414bda79f2e0510d6abd82905ba026784" Namespace="calico-system" Pod="whisker-5688bf7d58-r8mn4" WorkloadEndpoint="localhost-k8s-whisker--5688bf7d58--r8mn4-eth0" Jul 14 22:14:21.709761 env[1215]: 2025-07-14 22:14:21.675 [INFO][3284] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali44d49bc65c5 ContainerID="53f1812642b0984d80f9ddb527f72ab414bda79f2e0510d6abd82905ba026784" Namespace="calico-system" Pod="whisker-5688bf7d58-r8mn4" WorkloadEndpoint="localhost-k8s-whisker--5688bf7d58--r8mn4-eth0" Jul 14 22:14:21.709761 env[1215]: 2025-07-14 22:14:21.688 [INFO][3284] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="53f1812642b0984d80f9ddb527f72ab414bda79f2e0510d6abd82905ba026784" Namespace="calico-system" Pod="whisker-5688bf7d58-r8mn4" WorkloadEndpoint="localhost-k8s-whisker--5688bf7d58--r8mn4-eth0" Jul 14 22:14:21.709761 env[1215]: 2025-07-14 22:14:21.688 [INFO][3284] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="53f1812642b0984d80f9ddb527f72ab414bda79f2e0510d6abd82905ba026784" Namespace="calico-system" Pod="whisker-5688bf7d58-r8mn4" WorkloadEndpoint="localhost-k8s-whisker--5688bf7d58--r8mn4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--5688bf7d58--r8mn4-eth0", GenerateName:"whisker-5688bf7d58-", Namespace:"calico-system", SelfLink:"", UID:"a17ee04d-1f82-4aca-a5dc-8bf34e389047", ResourceVersion:"906", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 14, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"5688bf7d58", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"53f1812642b0984d80f9ddb527f72ab414bda79f2e0510d6abd82905ba026784", Pod:"whisker-5688bf7d58-r8mn4", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali44d49bc65c5", MAC:"82:7e:d3:22:cf:91", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:21.709761 env[1215]: 2025-07-14 22:14:21.697 [INFO][3284] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="53f1812642b0984d80f9ddb527f72ab414bda79f2e0510d6abd82905ba026784" Namespace="calico-system" Pod="whisker-5688bf7d58-r8mn4" WorkloadEndpoint="localhost-k8s-whisker--5688bf7d58--r8mn4-eth0" Jul 14 22:14:21.725107 env[1215]: time="2025-07-14T22:14:21.725039964Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:14:21.725227 env[1215]: time="2025-07-14T22:14:21.725113237Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:14:21.725227 env[1215]: time="2025-07-14T22:14:21.725138955Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:14:21.725379 env[1215]: time="2025-07-14T22:14:21.725336177Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/53f1812642b0984d80f9ddb527f72ab414bda79f2e0510d6abd82905ba026784 pid=3418 runtime=io.containerd.runc.v2 Jul 14 22:14:21.752520 systemd[1]: Started cri-containerd-53f1812642b0984d80f9ddb527f72ab414bda79f2e0510d6abd82905ba026784.scope. Jul 14 22:14:21.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.786000 audit: BPF prog-id=142 op=LOAD Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit[3427]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=3418 pid=3427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:21.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533663138313236343262303938346438306639646462353237663732 Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit[3427]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3418 pid=3427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:21.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533663138313236343262303938346438306639646462353237663732 Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit: BPF prog-id=143 op=LOAD Jul 14 22:14:21.787000 audit[3427]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3418 pid=3427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:21.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533663138313236343262303938346438306639646462353237663732 Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit: BPF prog-id=144 op=LOAD Jul 14 22:14:21.787000 audit[3427]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3418 pid=3427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:21.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533663138313236343262303938346438306639646462353237663732 Jul 14 22:14:21.787000 audit: BPF prog-id=144 op=UNLOAD Jul 14 22:14:21.787000 audit: BPF prog-id=143 op=UNLOAD Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:21.787000 audit: BPF prog-id=145 op=LOAD Jul 14 22:14:21.787000 audit[3427]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3418 pid=3427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:21.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533663138313236343262303938346438306639646462353237663732 Jul 14 22:14:21.793196 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 22:14:21.819860 env[1215]: time="2025-07-14T22:14:21.819812840Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5688bf7d58-r8mn4,Uid:a17ee04d-1f82-4aca-a5dc-8bf34e389047,Namespace:calico-system,Attempt:0,} returns sandbox id \"53f1812642b0984d80f9ddb527f72ab414bda79f2e0510d6abd82905ba026784\"" Jul 14 22:14:21.824776 env[1215]: time="2025-07-14T22:14:21.824746556Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 14 22:14:21.982417 kubelet[2006]: I0714 22:14:21.982379 2006 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="d1ed8c37-1b24-429a-ae6d-4e451008faeb" path="/var/lib/kubelet/pods/d1ed8c37-1b24-429a-ae6d-4e451008faeb/volumes" Jul 14 22:14:22.741913 env[1215]: time="2025-07-14T22:14:22.741857884Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:22.743212 env[1215]: time="2025-07-14T22:14:22.743172572Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:22.744686 env[1215]: time="2025-07-14T22:14:22.744660805Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:22.746015 env[1215]: time="2025-07-14T22:14:22.745981413Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:22.746626 env[1215]: time="2025-07-14T22:14:22.746595881Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817\"" Jul 14 22:14:22.751869 env[1215]: time="2025-07-14T22:14:22.751839994Z" level=info msg="CreateContainer within sandbox \"53f1812642b0984d80f9ddb527f72ab414bda79f2e0510d6abd82905ba026784\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 14 22:14:22.762131 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3389418083.mount: Deactivated successfully. Jul 14 22:14:22.767713 env[1215]: time="2025-07-14T22:14:22.767650330Z" level=info msg="CreateContainer within sandbox \"53f1812642b0984d80f9ddb527f72ab414bda79f2e0510d6abd82905ba026784\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"a731a177ff711fda086e2caec725800a45d80b48e32cd9ec1230b7930fdc96f9\"" Jul 14 22:14:22.768158 env[1215]: time="2025-07-14T22:14:22.768126969Z" level=info msg="StartContainer for \"a731a177ff711fda086e2caec725800a45d80b48e32cd9ec1230b7930fdc96f9\"" Jul 14 22:14:22.771849 systemd-networkd[1039]: cali44d49bc65c5: Gained IPv6LL Jul 14 22:14:22.792754 systemd[1]: Started cri-containerd-a731a177ff711fda086e2caec725800a45d80b48e32cd9ec1230b7930fdc96f9.scope. Jul 14 22:14:22.843000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.843000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.843000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.843000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.843000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.843000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.843000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.843000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.843000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.843000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.843000 audit: BPF prog-id=146 op=LOAD Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit[3462]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3418 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:22.844000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137333161313737666637313166646130383665326361656337323538 Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit[3462]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3418 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:22.844000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137333161313737666637313166646130383665326361656337323538 Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit: BPF prog-id=147 op=LOAD Jul 14 22:14:22.844000 audit[3462]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3418 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:22.844000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137333161313737666637313166646130383665326361656337323538 Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit: BPF prog-id=148 op=LOAD Jul 14 22:14:22.844000 audit[3462]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3418 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:22.844000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137333161313737666637313166646130383665326361656337323538 Jul 14 22:14:22.844000 audit: BPF prog-id=148 op=UNLOAD Jul 14 22:14:22.844000 audit: BPF prog-id=147 op=UNLOAD Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:22.844000 audit: BPF prog-id=149 op=LOAD Jul 14 22:14:22.844000 audit[3462]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3418 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:22.844000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137333161313737666637313166646130383665326361656337323538 Jul 14 22:14:22.874380 env[1215]: time="2025-07-14T22:14:22.873924449Z" level=info msg="StartContainer for \"a731a177ff711fda086e2caec725800a45d80b48e32cd9ec1230b7930fdc96f9\" returns successfully" Jul 14 22:14:22.877394 env[1215]: time="2025-07-14T22:14:22.876080106Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 14 22:14:22.919000 audit[3473]: AVC avc: denied { search } for pid=3473 comm="nginx" name="crypto" dev="proc" ino=20769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c195,c909 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 14 22:14:22.919000 audit[3473]: SYSCALL arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffff7f4ea958 a2=0 a3=0 items=0 ppid=3418 pid=3473 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c195,c909 key=(null) Jul 14 22:14:22.919000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 14 22:14:24.406177 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount334309598.mount: Deactivated successfully. Jul 14 22:14:24.429153 env[1215]: time="2025-07-14T22:14:24.429106411Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:24.430994 env[1215]: time="2025-07-14T22:14:24.430961231Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:24.432802 env[1215]: time="2025-07-14T22:14:24.432767774Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:24.434320 env[1215]: time="2025-07-14T22:14:24.434199945Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:24.435041 env[1215]: time="2025-07-14T22:14:24.434703947Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4\"" Jul 14 22:14:24.438975 env[1215]: time="2025-07-14T22:14:24.438943106Z" level=info msg="CreateContainer within sandbox \"53f1812642b0984d80f9ddb527f72ab414bda79f2e0510d6abd82905ba026784\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 14 22:14:24.449195 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount261636031.mount: Deactivated successfully. Jul 14 22:14:24.450502 env[1215]: time="2025-07-14T22:14:24.450465673Z" level=info msg="CreateContainer within sandbox \"53f1812642b0984d80f9ddb527f72ab414bda79f2e0510d6abd82905ba026784\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"819ecde7334670b25334a8efbcc09fb58fd4ac5590f3dbeea2d4ff63716cb3d0\"" Jul 14 22:14:24.451767 env[1215]: time="2025-07-14T22:14:24.450841124Z" level=info msg="StartContainer for \"819ecde7334670b25334a8efbcc09fb58fd4ac5590f3dbeea2d4ff63716cb3d0\"" Jul 14 22:14:24.469522 systemd[1]: Started cri-containerd-819ecde7334670b25334a8efbcc09fb58fd4ac5590f3dbeea2d4ff63716cb3d0.scope. Jul 14 22:14:24.511000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.511000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.511000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.511000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.511000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.511000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.511000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.511000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.511000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.511000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.511000 audit: BPF prog-id=150 op=LOAD Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit[3551]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3418 pid=3551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:24.512000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831396563646537333334363730623235333334613865666263633039 Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit[3551]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3418 pid=3551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:24.512000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831396563646537333334363730623235333334613865666263633039 Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit: BPF prog-id=151 op=LOAD Jul 14 22:14:24.512000 audit[3551]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3418 pid=3551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:24.512000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831396563646537333334363730623235333334613865666263633039 Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit: BPF prog-id=152 op=LOAD Jul 14 22:14:24.512000 audit[3551]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3418 pid=3551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:24.512000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831396563646537333334363730623235333334613865666263633039 Jul 14 22:14:24.512000 audit: BPF prog-id=152 op=UNLOAD Jul 14 22:14:24.512000 audit: BPF prog-id=151 op=UNLOAD Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:24.512000 audit: BPF prog-id=153 op=LOAD Jul 14 22:14:24.512000 audit[3551]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3418 pid=3551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:24.512000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831396563646537333334363730623235333334613865666263633039 Jul 14 22:14:24.530447 env[1215]: time="2025-07-14T22:14:24.530406615Z" level=info msg="StartContainer for \"819ecde7334670b25334a8efbcc09fb58fd4ac5590f3dbeea2d4ff63716cb3d0\" returns successfully" Jul 14 22:14:25.101966 kubelet[2006]: I0714 22:14:25.101905 2006 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-5688bf7d58-r8mn4" podStartSLOduration=1.4904914 podStartE2EDuration="4.101889077s" podCreationTimestamp="2025-07-14 22:14:21 +0000 UTC" firstStartedPulling="2025-07-14 22:14:21.824419266 +0000 UTC m=+37.939592911" lastFinishedPulling="2025-07-14 22:14:24.435816943 +0000 UTC m=+40.550990588" observedRunningTime="2025-07-14 22:14:25.101336356 +0000 UTC m=+41.216510001" watchObservedRunningTime="2025-07-14 22:14:25.101889077 +0000 UTC m=+41.217062722" Jul 14 22:14:25.135000 audit[3607]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=3607 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:25.139422 kernel: kauditd_printk_skb: 242 callbacks suppressed Jul 14 22:14:25.139505 kernel: audit: type=1325 audit(1752531265.135:1080): table=filter:99 family=2 entries=21 op=nft_register_rule pid=3607 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:25.139533 kernel: audit: type=1300 audit(1752531265.135:1080): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffd191dd70 a2=0 a3=1 items=0 ppid=2113 pid=3607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:25.135000 audit[3607]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffd191dd70 a2=0 a3=1 items=0 ppid=2113 pid=3607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:25.135000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:25.144991 kernel: audit: type=1327 audit(1752531265.135:1080): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:25.149000 audit[3607]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=3607 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:25.149000 audit[3607]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffd191dd70 a2=0 a3=1 items=0 ppid=2113 pid=3607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:25.155597 kernel: audit: type=1325 audit(1752531265.149:1081): table=nat:100 family=2 entries=19 op=nft_register_chain pid=3607 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:25.155666 kernel: audit: type=1300 audit(1752531265.149:1081): arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffd191dd70 a2=0 a3=1 items=0 ppid=2113 pid=3607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:25.149000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:25.157742 kernel: audit: type=1327 audit(1752531265.149:1081): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:26.961566 kubelet[2006]: I0714 22:14:26.961522 2006 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 22:14:26.981144 env[1215]: time="2025-07-14T22:14:26.981083480Z" level=info msg="StopPodSandbox for \"e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31\"" Jul 14 22:14:26.981538 env[1215]: time="2025-07-14T22:14:26.981512851Z" level=info msg="StopPodSandbox for \"41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2\"" Jul 14 22:14:27.112003 env[1215]: 2025-07-14 22:14:27.060 [INFO][3671] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" Jul 14 22:14:27.112003 env[1215]: 2025-07-14 22:14:27.060 [INFO][3671] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" iface="eth0" netns="/var/run/netns/cni-176a7e98-0b36-df0d-39ab-9ce4982dd70f" Jul 14 22:14:27.112003 env[1215]: 2025-07-14 22:14:27.060 [INFO][3671] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" iface="eth0" netns="/var/run/netns/cni-176a7e98-0b36-df0d-39ab-9ce4982dd70f" Jul 14 22:14:27.112003 env[1215]: 2025-07-14 22:14:27.060 [INFO][3671] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" iface="eth0" netns="/var/run/netns/cni-176a7e98-0b36-df0d-39ab-9ce4982dd70f" Jul 14 22:14:27.112003 env[1215]: 2025-07-14 22:14:27.061 [INFO][3671] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" Jul 14 22:14:27.112003 env[1215]: 2025-07-14 22:14:27.061 [INFO][3671] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" Jul 14 22:14:27.112003 env[1215]: 2025-07-14 22:14:27.087 [INFO][3695] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" HandleID="k8s-pod-network.e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" Workload="localhost-k8s-calico--apiserver--74cfd4cbdb--6xqzx-eth0" Jul 14 22:14:27.112003 env[1215]: 2025-07-14 22:14:27.088 [INFO][3695] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:27.112003 env[1215]: 2025-07-14 22:14:27.088 [INFO][3695] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:27.112003 env[1215]: 2025-07-14 22:14:27.104 [WARNING][3695] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" HandleID="k8s-pod-network.e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" Workload="localhost-k8s-calico--apiserver--74cfd4cbdb--6xqzx-eth0" Jul 14 22:14:27.112003 env[1215]: 2025-07-14 22:14:27.105 [INFO][3695] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" HandleID="k8s-pod-network.e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" Workload="localhost-k8s-calico--apiserver--74cfd4cbdb--6xqzx-eth0" Jul 14 22:14:27.112003 env[1215]: 2025-07-14 22:14:27.106 [INFO][3695] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:27.112003 env[1215]: 2025-07-14 22:14:27.108 [INFO][3671] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" Jul 14 22:14:27.114557 systemd[1]: run-netns-cni\x2d176a7e98\x2d0b36\x2ddf0d\x2d39ab\x2d9ce4982dd70f.mount: Deactivated successfully. Jul 14 22:14:27.115665 env[1215]: time="2025-07-14T22:14:27.115439346Z" level=info msg="TearDown network for sandbox \"e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31\" successfully" Jul 14 22:14:27.115665 env[1215]: time="2025-07-14T22:14:27.115474664Z" level=info msg="StopPodSandbox for \"e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31\" returns successfully" Jul 14 22:14:27.116239 env[1215]: time="2025-07-14T22:14:27.116208898Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-74cfd4cbdb-6xqzx,Uid:1b6ea792-b855-4382-96d6-ba04817e00fd,Namespace:calico-apiserver,Attempt:1,}" Jul 14 22:14:27.123626 env[1215]: 2025-07-14 22:14:27.062 [INFO][3666] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" Jul 14 22:14:27.123626 env[1215]: 2025-07-14 22:14:27.063 [INFO][3666] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" iface="eth0" netns="/var/run/netns/cni-34e42a4b-e67a-0d1b-ecaa-a23ee06d9f56" Jul 14 22:14:27.123626 env[1215]: 2025-07-14 22:14:27.063 [INFO][3666] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" iface="eth0" netns="/var/run/netns/cni-34e42a4b-e67a-0d1b-ecaa-a23ee06d9f56" Jul 14 22:14:27.123626 env[1215]: 2025-07-14 22:14:27.063 [INFO][3666] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" iface="eth0" netns="/var/run/netns/cni-34e42a4b-e67a-0d1b-ecaa-a23ee06d9f56" Jul 14 22:14:27.123626 env[1215]: 2025-07-14 22:14:27.063 [INFO][3666] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" Jul 14 22:14:27.123626 env[1215]: 2025-07-14 22:14:27.063 [INFO][3666] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" Jul 14 22:14:27.123626 env[1215]: 2025-07-14 22:14:27.099 [INFO][3694] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" HandleID="k8s-pod-network.41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" Workload="localhost-k8s-coredns--674b8bbfcf--9l5g9-eth0" Jul 14 22:14:27.123626 env[1215]: 2025-07-14 22:14:27.100 [INFO][3694] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:27.123626 env[1215]: 2025-07-14 22:14:27.106 [INFO][3694] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:27.123626 env[1215]: 2025-07-14 22:14:27.116 [WARNING][3694] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" HandleID="k8s-pod-network.41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" Workload="localhost-k8s-coredns--674b8bbfcf--9l5g9-eth0" Jul 14 22:14:27.123626 env[1215]: 2025-07-14 22:14:27.116 [INFO][3694] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" HandleID="k8s-pod-network.41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" Workload="localhost-k8s-coredns--674b8bbfcf--9l5g9-eth0" Jul 14 22:14:27.123626 env[1215]: 2025-07-14 22:14:27.119 [INFO][3694] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:27.123626 env[1215]: 2025-07-14 22:14:27.121 [INFO][3666] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" Jul 14 22:14:27.124110 env[1215]: time="2025-07-14T22:14:27.123808420Z" level=info msg="TearDown network for sandbox \"41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2\" successfully" Jul 14 22:14:27.124110 env[1215]: time="2025-07-14T22:14:27.123842218Z" level=info msg="StopPodSandbox for \"41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2\" returns successfully" Jul 14 22:14:27.124400 kubelet[2006]: E0714 22:14:27.124362 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:14:27.125710 systemd[1]: run-netns-cni\x2d34e42a4b\x2de67a\x2d0d1b\x2decaa\x2da23ee06d9f56.mount: Deactivated successfully. Jul 14 22:14:27.126919 env[1215]: time="2025-07-14T22:14:27.126777953Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-9l5g9,Uid:f2152eb1-3ffc-418b-80cb-f2d468160f26,Namespace:kube-system,Attempt:1,}" Jul 14 22:14:27.304215 systemd-networkd[1039]: calia2bca902ab0: Link UP Jul 14 22:14:27.306935 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 14 22:14:27.307017 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calia2bca902ab0: link becomes ready Jul 14 22:14:27.307700 systemd-networkd[1039]: calia2bca902ab0: Gained carrier Jul 14 22:14:27.319912 env[1215]: 2025-07-14 22:14:27.192 [INFO][3738] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 14 22:14:27.319912 env[1215]: 2025-07-14 22:14:27.210 [INFO][3738] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--74cfd4cbdb--6xqzx-eth0 calico-apiserver-74cfd4cbdb- calico-apiserver 1b6ea792-b855-4382-96d6-ba04817e00fd 939 0 2025-07-14 22:14:04 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:74cfd4cbdb projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-74cfd4cbdb-6xqzx eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calia2bca902ab0 [] [] }} ContainerID="d8f75969780479587fd6bea002c09656005b7fd9c8ae375761e6f2c574d77882" Namespace="calico-apiserver" Pod="calico-apiserver-74cfd4cbdb-6xqzx" WorkloadEndpoint="localhost-k8s-calico--apiserver--74cfd4cbdb--6xqzx-" Jul 14 22:14:27.319912 env[1215]: 2025-07-14 22:14:27.210 [INFO][3738] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d8f75969780479587fd6bea002c09656005b7fd9c8ae375761e6f2c574d77882" Namespace="calico-apiserver" Pod="calico-apiserver-74cfd4cbdb-6xqzx" WorkloadEndpoint="localhost-k8s-calico--apiserver--74cfd4cbdb--6xqzx-eth0" Jul 14 22:14:27.319912 env[1215]: 2025-07-14 22:14:27.255 [INFO][3775] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d8f75969780479587fd6bea002c09656005b7fd9c8ae375761e6f2c574d77882" HandleID="k8s-pod-network.d8f75969780479587fd6bea002c09656005b7fd9c8ae375761e6f2c574d77882" Workload="localhost-k8s-calico--apiserver--74cfd4cbdb--6xqzx-eth0" Jul 14 22:14:27.319912 env[1215]: 2025-07-14 22:14:27.255 [INFO][3775] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="d8f75969780479587fd6bea002c09656005b7fd9c8ae375761e6f2c574d77882" HandleID="k8s-pod-network.d8f75969780479587fd6bea002c09656005b7fd9c8ae375761e6f2c574d77882" Workload="localhost-k8s-calico--apiserver--74cfd4cbdb--6xqzx-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001363f0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-74cfd4cbdb-6xqzx", "timestamp":"2025-07-14 22:14:27.255815476 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 22:14:27.319912 env[1215]: 2025-07-14 22:14:27.256 [INFO][3775] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:27.319912 env[1215]: 2025-07-14 22:14:27.256 [INFO][3775] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:27.319912 env[1215]: 2025-07-14 22:14:27.256 [INFO][3775] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 22:14:27.319912 env[1215]: 2025-07-14 22:14:27.267 [INFO][3775] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.d8f75969780479587fd6bea002c09656005b7fd9c8ae375761e6f2c574d77882" host="localhost" Jul 14 22:14:27.319912 env[1215]: 2025-07-14 22:14:27.278 [INFO][3775] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 22:14:27.319912 env[1215]: 2025-07-14 22:14:27.286 [INFO][3775] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 22:14:27.319912 env[1215]: 2025-07-14 22:14:27.287 [INFO][3775] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 22:14:27.319912 env[1215]: 2025-07-14 22:14:27.289 [INFO][3775] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 22:14:27.319912 env[1215]: 2025-07-14 22:14:27.289 [INFO][3775] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.d8f75969780479587fd6bea002c09656005b7fd9c8ae375761e6f2c574d77882" host="localhost" Jul 14 22:14:27.319912 env[1215]: 2025-07-14 22:14:27.290 [INFO][3775] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.d8f75969780479587fd6bea002c09656005b7fd9c8ae375761e6f2c574d77882 Jul 14 22:14:27.319912 env[1215]: 2025-07-14 22:14:27.295 [INFO][3775] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.d8f75969780479587fd6bea002c09656005b7fd9c8ae375761e6f2c574d77882" host="localhost" Jul 14 22:14:27.319912 env[1215]: 2025-07-14 22:14:27.299 [INFO][3775] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.d8f75969780479587fd6bea002c09656005b7fd9c8ae375761e6f2c574d77882" host="localhost" Jul 14 22:14:27.319912 env[1215]: 2025-07-14 22:14:27.299 [INFO][3775] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.d8f75969780479587fd6bea002c09656005b7fd9c8ae375761e6f2c574d77882" host="localhost" Jul 14 22:14:27.319912 env[1215]: 2025-07-14 22:14:27.299 [INFO][3775] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:27.319912 env[1215]: 2025-07-14 22:14:27.299 [INFO][3775] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="d8f75969780479587fd6bea002c09656005b7fd9c8ae375761e6f2c574d77882" HandleID="k8s-pod-network.d8f75969780479587fd6bea002c09656005b7fd9c8ae375761e6f2c574d77882" Workload="localhost-k8s-calico--apiserver--74cfd4cbdb--6xqzx-eth0" Jul 14 22:14:27.320661 env[1215]: 2025-07-14 22:14:27.302 [INFO][3738] cni-plugin/k8s.go 418: Populated endpoint ContainerID="d8f75969780479587fd6bea002c09656005b7fd9c8ae375761e6f2c574d77882" Namespace="calico-apiserver" Pod="calico-apiserver-74cfd4cbdb-6xqzx" WorkloadEndpoint="localhost-k8s-calico--apiserver--74cfd4cbdb--6xqzx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--74cfd4cbdb--6xqzx-eth0", GenerateName:"calico-apiserver-74cfd4cbdb-", Namespace:"calico-apiserver", SelfLink:"", UID:"1b6ea792-b855-4382-96d6-ba04817e00fd", ResourceVersion:"939", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 14, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"74cfd4cbdb", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-74cfd4cbdb-6xqzx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia2bca902ab0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:27.320661 env[1215]: 2025-07-14 22:14:27.302 [INFO][3738] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="d8f75969780479587fd6bea002c09656005b7fd9c8ae375761e6f2c574d77882" Namespace="calico-apiserver" Pod="calico-apiserver-74cfd4cbdb-6xqzx" WorkloadEndpoint="localhost-k8s-calico--apiserver--74cfd4cbdb--6xqzx-eth0" Jul 14 22:14:27.320661 env[1215]: 2025-07-14 22:14:27.302 [INFO][3738] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calia2bca902ab0 ContainerID="d8f75969780479587fd6bea002c09656005b7fd9c8ae375761e6f2c574d77882" Namespace="calico-apiserver" Pod="calico-apiserver-74cfd4cbdb-6xqzx" WorkloadEndpoint="localhost-k8s-calico--apiserver--74cfd4cbdb--6xqzx-eth0" Jul 14 22:14:27.320661 env[1215]: 2025-07-14 22:14:27.307 [INFO][3738] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="d8f75969780479587fd6bea002c09656005b7fd9c8ae375761e6f2c574d77882" Namespace="calico-apiserver" Pod="calico-apiserver-74cfd4cbdb-6xqzx" WorkloadEndpoint="localhost-k8s-calico--apiserver--74cfd4cbdb--6xqzx-eth0" Jul 14 22:14:27.320661 env[1215]: 2025-07-14 22:14:27.308 [INFO][3738] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="d8f75969780479587fd6bea002c09656005b7fd9c8ae375761e6f2c574d77882" Namespace="calico-apiserver" Pod="calico-apiserver-74cfd4cbdb-6xqzx" WorkloadEndpoint="localhost-k8s-calico--apiserver--74cfd4cbdb--6xqzx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--74cfd4cbdb--6xqzx-eth0", GenerateName:"calico-apiserver-74cfd4cbdb-", Namespace:"calico-apiserver", SelfLink:"", UID:"1b6ea792-b855-4382-96d6-ba04817e00fd", ResourceVersion:"939", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 14, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"74cfd4cbdb", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d8f75969780479587fd6bea002c09656005b7fd9c8ae375761e6f2c574d77882", Pod:"calico-apiserver-74cfd4cbdb-6xqzx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia2bca902ab0", MAC:"7a:da:a2:06:ed:1d", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:27.320661 env[1215]: 2025-07-14 22:14:27.317 [INFO][3738] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="d8f75969780479587fd6bea002c09656005b7fd9c8ae375761e6f2c574d77882" Namespace="calico-apiserver" Pod="calico-apiserver-74cfd4cbdb-6xqzx" WorkloadEndpoint="localhost-k8s-calico--apiserver--74cfd4cbdb--6xqzx-eth0" Jul 14 22:14:27.356072 env[1215]: time="2025-07-14T22:14:27.356001693Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:14:27.356072 env[1215]: time="2025-07-14T22:14:27.356037251Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:14:27.356369 env[1215]: time="2025-07-14T22:14:27.356048531Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:14:27.356449 env[1215]: time="2025-07-14T22:14:27.356365231Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d8f75969780479587fd6bea002c09656005b7fd9c8ae375761e6f2c574d77882 pid=3816 runtime=io.containerd.runc.v2 Jul 14 22:14:27.366026 systemd[1]: Started cri-containerd-d8f75969780479587fd6bea002c09656005b7fd9c8ae375761e6f2c574d77882.scope. Jul 14 22:14:27.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.394815 kernel: audit: type=1400 audit(1752531267.388:1082): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.394887 kernel: audit: type=1400 audit(1752531267.388:1083): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.397450 kernel: audit: type=1400 audit(1752531267.388:1084): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.397507 kernel: audit: type=1400 audit(1752531267.388:1085): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.388000 audit: BPF prog-id=154 op=LOAD Jul 14 22:14:27.389000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.389000 audit[3825]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3816 pid=3825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:27.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438663735393639373830343739353837666436626561303032633039 Jul 14 22:14:27.389000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.389000 audit[3825]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3816 pid=3825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:27.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438663735393639373830343739353837666436626561303032633039 Jul 14 22:14:27.389000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.389000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.389000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.389000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.389000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.389000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.389000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.389000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.389000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.389000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.389000 audit: BPF prog-id=155 op=LOAD Jul 14 22:14:27.389000 audit[3825]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3816 pid=3825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:27.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438663735393639373830343739353837666436626561303032633039 Jul 14 22:14:27.391000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.391000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.391000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.391000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.391000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.391000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.391000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.391000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.391000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.391000 audit: BPF prog-id=156 op=LOAD Jul 14 22:14:27.391000 audit[3825]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3816 pid=3825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:27.391000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438663735393639373830343739353837666436626561303032633039 Jul 14 22:14:27.394000 audit: BPF prog-id=156 op=UNLOAD Jul 14 22:14:27.394000 audit: BPF prog-id=155 op=UNLOAD Jul 14 22:14:27.394000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.394000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.394000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.394000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.394000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.394000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.394000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.394000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.394000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.394000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.394000 audit: BPF prog-id=157 op=LOAD Jul 14 22:14:27.394000 audit[3825]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3816 pid=3825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:27.394000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438663735393639373830343739353837666436626561303032633039 Jul 14 22:14:27.400513 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 22:14:27.418372 systemd-networkd[1039]: cali131996a9cb5: Link UP Jul 14 22:14:27.419520 systemd-networkd[1039]: cali131996a9cb5: Gained carrier Jul 14 22:14:27.419820 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali131996a9cb5: link becomes ready Jul 14 22:14:27.427012 env[1215]: time="2025-07-14T22:14:27.423336218Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-74cfd4cbdb-6xqzx,Uid:1b6ea792-b855-4382-96d6-ba04817e00fd,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"d8f75969780479587fd6bea002c09656005b7fd9c8ae375761e6f2c574d77882\"" Jul 14 22:14:27.427012 env[1215]: time="2025-07-14T22:14:27.425220139Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 14 22:14:27.434698 env[1215]: 2025-07-14 22:14:27.193 [INFO][3740] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 14 22:14:27.434698 env[1215]: 2025-07-14 22:14:27.216 [INFO][3740] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--9l5g9-eth0 coredns-674b8bbfcf- kube-system f2152eb1-3ffc-418b-80cb-f2d468160f26 940 0 2025-07-14 22:13:49 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-9l5g9 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali131996a9cb5 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="12cdc9e35c3202a8b33321d788fe0ed9b0f3aec683377fedf065ae5e7226f827" Namespace="kube-system" Pod="coredns-674b8bbfcf-9l5g9" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--9l5g9-" Jul 14 22:14:27.434698 env[1215]: 2025-07-14 22:14:27.216 [INFO][3740] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="12cdc9e35c3202a8b33321d788fe0ed9b0f3aec683377fedf065ae5e7226f827" Namespace="kube-system" Pod="coredns-674b8bbfcf-9l5g9" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--9l5g9-eth0" Jul 14 22:14:27.434698 env[1215]: 2025-07-14 22:14:27.276 [INFO][3787] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="12cdc9e35c3202a8b33321d788fe0ed9b0f3aec683377fedf065ae5e7226f827" HandleID="k8s-pod-network.12cdc9e35c3202a8b33321d788fe0ed9b0f3aec683377fedf065ae5e7226f827" Workload="localhost-k8s-coredns--674b8bbfcf--9l5g9-eth0" Jul 14 22:14:27.434698 env[1215]: 2025-07-14 22:14:27.276 [INFO][3787] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="12cdc9e35c3202a8b33321d788fe0ed9b0f3aec683377fedf065ae5e7226f827" HandleID="k8s-pod-network.12cdc9e35c3202a8b33321d788fe0ed9b0f3aec683377fedf065ae5e7226f827" Workload="localhost-k8s-coredns--674b8bbfcf--9l5g9-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004dbe0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-9l5g9", "timestamp":"2025-07-14 22:14:27.276049443 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 22:14:27.434698 env[1215]: 2025-07-14 22:14:27.276 [INFO][3787] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:27.434698 env[1215]: 2025-07-14 22:14:27.300 [INFO][3787] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:27.434698 env[1215]: 2025-07-14 22:14:27.300 [INFO][3787] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 22:14:27.434698 env[1215]: 2025-07-14 22:14:27.368 [INFO][3787] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.12cdc9e35c3202a8b33321d788fe0ed9b0f3aec683377fedf065ae5e7226f827" host="localhost" Jul 14 22:14:27.434698 env[1215]: 2025-07-14 22:14:27.384 [INFO][3787] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 22:14:27.434698 env[1215]: 2025-07-14 22:14:27.395 [INFO][3787] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 22:14:27.434698 env[1215]: 2025-07-14 22:14:27.399 [INFO][3787] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 22:14:27.434698 env[1215]: 2025-07-14 22:14:27.402 [INFO][3787] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 22:14:27.434698 env[1215]: 2025-07-14 22:14:27.402 [INFO][3787] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.12cdc9e35c3202a8b33321d788fe0ed9b0f3aec683377fedf065ae5e7226f827" host="localhost" Jul 14 22:14:27.434698 env[1215]: 2025-07-14 22:14:27.404 [INFO][3787] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.12cdc9e35c3202a8b33321d788fe0ed9b0f3aec683377fedf065ae5e7226f827 Jul 14 22:14:27.434698 env[1215]: 2025-07-14 22:14:27.407 [INFO][3787] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.12cdc9e35c3202a8b33321d788fe0ed9b0f3aec683377fedf065ae5e7226f827" host="localhost" Jul 14 22:14:27.434698 env[1215]: 2025-07-14 22:14:27.412 [INFO][3787] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.12cdc9e35c3202a8b33321d788fe0ed9b0f3aec683377fedf065ae5e7226f827" host="localhost" Jul 14 22:14:27.434698 env[1215]: 2025-07-14 22:14:27.413 [INFO][3787] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.12cdc9e35c3202a8b33321d788fe0ed9b0f3aec683377fedf065ae5e7226f827" host="localhost" Jul 14 22:14:27.434698 env[1215]: 2025-07-14 22:14:27.413 [INFO][3787] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:27.434698 env[1215]: 2025-07-14 22:14:27.413 [INFO][3787] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="12cdc9e35c3202a8b33321d788fe0ed9b0f3aec683377fedf065ae5e7226f827" HandleID="k8s-pod-network.12cdc9e35c3202a8b33321d788fe0ed9b0f3aec683377fedf065ae5e7226f827" Workload="localhost-k8s-coredns--674b8bbfcf--9l5g9-eth0" Jul 14 22:14:27.435322 env[1215]: 2025-07-14 22:14:27.415 [INFO][3740] cni-plugin/k8s.go 418: Populated endpoint ContainerID="12cdc9e35c3202a8b33321d788fe0ed9b0f3aec683377fedf065ae5e7226f827" Namespace="kube-system" Pod="coredns-674b8bbfcf-9l5g9" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--9l5g9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--9l5g9-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"f2152eb1-3ffc-418b-80cb-f2d468160f26", ResourceVersion:"940", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 13, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-9l5g9", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali131996a9cb5", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:27.435322 env[1215]: 2025-07-14 22:14:27.416 [INFO][3740] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="12cdc9e35c3202a8b33321d788fe0ed9b0f3aec683377fedf065ae5e7226f827" Namespace="kube-system" Pod="coredns-674b8bbfcf-9l5g9" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--9l5g9-eth0" Jul 14 22:14:27.435322 env[1215]: 2025-07-14 22:14:27.416 [INFO][3740] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali131996a9cb5 ContainerID="12cdc9e35c3202a8b33321d788fe0ed9b0f3aec683377fedf065ae5e7226f827" Namespace="kube-system" Pod="coredns-674b8bbfcf-9l5g9" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--9l5g9-eth0" Jul 14 22:14:27.435322 env[1215]: 2025-07-14 22:14:27.419 [INFO][3740] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="12cdc9e35c3202a8b33321d788fe0ed9b0f3aec683377fedf065ae5e7226f827" Namespace="kube-system" Pod="coredns-674b8bbfcf-9l5g9" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--9l5g9-eth0" Jul 14 22:14:27.435322 env[1215]: 2025-07-14 22:14:27.420 [INFO][3740] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="12cdc9e35c3202a8b33321d788fe0ed9b0f3aec683377fedf065ae5e7226f827" Namespace="kube-system" Pod="coredns-674b8bbfcf-9l5g9" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--9l5g9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--9l5g9-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"f2152eb1-3ffc-418b-80cb-f2d468160f26", ResourceVersion:"940", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 13, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"12cdc9e35c3202a8b33321d788fe0ed9b0f3aec683377fedf065ae5e7226f827", Pod:"coredns-674b8bbfcf-9l5g9", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali131996a9cb5", MAC:"06:be:53:91:2d:a0", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:27.435322 env[1215]: 2025-07-14 22:14:27.431 [INFO][3740] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="12cdc9e35c3202a8b33321d788fe0ed9b0f3aec683377fedf065ae5e7226f827" Namespace="kube-system" Pod="coredns-674b8bbfcf-9l5g9" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--9l5g9-eth0" Jul 14 22:14:27.444376 env[1215]: time="2025-07-14T22:14:27.444312258Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:14:27.444490 env[1215]: time="2025-07-14T22:14:27.444386214Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:14:27.444490 env[1215]: time="2025-07-14T22:14:27.444411732Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:14:27.444614 env[1215]: time="2025-07-14T22:14:27.444560843Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/12cdc9e35c3202a8b33321d788fe0ed9b0f3aec683377fedf065ae5e7226f827 pid=3863 runtime=io.containerd.runc.v2 Jul 14 22:14:27.454658 systemd[1]: Started cri-containerd-12cdc9e35c3202a8b33321d788fe0ed9b0f3aec683377fedf065ae5e7226f827.scope. Jul 14 22:14:27.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit: BPF prog-id=158 op=LOAD Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { bpf } for pid=3874 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit[3874]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3863 pid=3874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:27.474000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132636463396533356333323032613862333333323164373838666530 Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit[3874]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3863 pid=3874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:27.474000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132636463396533356333323032613862333333323164373838666530 Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { bpf } for pid=3874 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { bpf } for pid=3874 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { bpf } for pid=3874 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { bpf } for pid=3874 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { bpf } for pid=3874 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit: BPF prog-id=159 op=LOAD Jul 14 22:14:27.474000 audit[3874]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3863 pid=3874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:27.474000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132636463396533356333323032613862333333323164373838666530 Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { bpf } for pid=3874 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { bpf } for pid=3874 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { bpf } for pid=3874 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { bpf } for pid=3874 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit: BPF prog-id=160 op=LOAD Jul 14 22:14:27.474000 audit[3874]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3863 pid=3874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:27.474000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132636463396533356333323032613862333333323164373838666530 Jul 14 22:14:27.474000 audit: BPF prog-id=160 op=UNLOAD Jul 14 22:14:27.474000 audit: BPF prog-id=159 op=UNLOAD Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { bpf } for pid=3874 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { bpf } for pid=3874 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { bpf } for pid=3874 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { perfmon } for pid=3874 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { bpf } for pid=3874 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit[3874]: AVC avc: denied { bpf } for pid=3874 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.474000 audit: BPF prog-id=161 op=LOAD Jul 14 22:14:27.474000 audit[3874]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3863 pid=3874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:27.474000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132636463396533356333323032613862333333323164373838666530 Jul 14 22:14:27.475813 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 22:14:27.493642 env[1215]: time="2025-07-14T22:14:27.493595558Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-9l5g9,Uid:f2152eb1-3ffc-418b-80cb-f2d468160f26,Namespace:kube-system,Attempt:1,} returns sandbox id \"12cdc9e35c3202a8b33321d788fe0ed9b0f3aec683377fedf065ae5e7226f827\"" Jul 14 22:14:27.494358 kubelet[2006]: E0714 22:14:27.494318 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:14:27.498019 env[1215]: time="2025-07-14T22:14:27.497983802Z" level=info msg="CreateContainer within sandbox \"12cdc9e35c3202a8b33321d788fe0ed9b0f3aec683377fedf065ae5e7226f827\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 14 22:14:27.510443 env[1215]: time="2025-07-14T22:14:27.510391981Z" level=info msg="CreateContainer within sandbox \"12cdc9e35c3202a8b33321d788fe0ed9b0f3aec683377fedf065ae5e7226f827\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"226de183ee99e861a2b7a305c37714df112c33ec3e306660a3559ad5bf579d3c\"" Jul 14 22:14:27.510900 env[1215]: time="2025-07-14T22:14:27.510867751Z" level=info msg="StartContainer for \"226de183ee99e861a2b7a305c37714df112c33ec3e306660a3559ad5bf579d3c\"" Jul 14 22:14:27.525655 systemd[1]: Started cri-containerd-226de183ee99e861a2b7a305c37714df112c33ec3e306660a3559ad5bf579d3c.scope. Jul 14 22:14:27.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.553000 audit: BPF prog-id=162 op=LOAD Jul 14 22:14:27.553000 audit[3903]: AVC avc: denied { bpf } for pid=3903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.553000 audit[3903]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3863 pid=3903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:27.553000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232366465313833656539396538363161326237613330356333373731 Jul 14 22:14:27.553000 audit[3903]: AVC avc: denied { perfmon } for pid=3903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.553000 audit[3903]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3863 pid=3903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:27.553000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232366465313833656539396538363161326237613330356333373731 Jul 14 22:14:27.554000 audit[3903]: AVC avc: denied { bpf } for pid=3903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.554000 audit[3903]: AVC avc: denied { bpf } for pid=3903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.554000 audit[3903]: AVC avc: denied { bpf } for pid=3903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.554000 audit[3903]: AVC avc: denied { perfmon } for pid=3903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.554000 audit[3903]: AVC avc: denied { perfmon } for pid=3903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.554000 audit[3903]: AVC avc: denied { perfmon } for pid=3903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.554000 audit[3903]: AVC avc: denied { perfmon } for pid=3903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.554000 audit[3903]: AVC avc: denied { perfmon } for pid=3903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.554000 audit[3903]: AVC avc: denied { bpf } for pid=3903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.554000 audit[3903]: AVC avc: denied { bpf } for pid=3903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.554000 audit: BPF prog-id=163 op=LOAD Jul 14 22:14:27.554000 audit[3903]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3863 pid=3903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:27.554000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232366465313833656539396538363161326237613330356333373731 Jul 14 22:14:27.555000 audit[3903]: AVC avc: denied { bpf } for pid=3903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.555000 audit[3903]: AVC avc: denied { bpf } for pid=3903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.555000 audit[3903]: AVC avc: denied { perfmon } for pid=3903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.555000 audit[3903]: AVC avc: denied { perfmon } for pid=3903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.555000 audit[3903]: AVC avc: denied { perfmon } for pid=3903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.555000 audit[3903]: AVC avc: denied { perfmon } for pid=3903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.555000 audit[3903]: AVC avc: denied { perfmon } for pid=3903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.555000 audit[3903]: AVC avc: denied { bpf } for pid=3903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.555000 audit[3903]: AVC avc: denied { bpf } for pid=3903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.555000 audit: BPF prog-id=164 op=LOAD Jul 14 22:14:27.555000 audit[3903]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3863 pid=3903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:27.555000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232366465313833656539396538363161326237613330356333373731 Jul 14 22:14:27.556000 audit: BPF prog-id=164 op=UNLOAD Jul 14 22:14:27.556000 audit: BPF prog-id=163 op=UNLOAD Jul 14 22:14:27.556000 audit[3903]: AVC avc: denied { bpf } for pid=3903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.556000 audit[3903]: AVC avc: denied { bpf } for pid=3903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.556000 audit[3903]: AVC avc: denied { bpf } for pid=3903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.556000 audit[3903]: AVC avc: denied { perfmon } for pid=3903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.556000 audit[3903]: AVC avc: denied { perfmon } for pid=3903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.556000 audit[3903]: AVC avc: denied { perfmon } for pid=3903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.556000 audit[3903]: AVC avc: denied { perfmon } for pid=3903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.556000 audit[3903]: AVC avc: denied { perfmon } for pid=3903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.556000 audit[3903]: AVC avc: denied { bpf } for pid=3903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.556000 audit[3903]: AVC avc: denied { bpf } for pid=3903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:27.556000 audit: BPF prog-id=165 op=LOAD Jul 14 22:14:27.556000 audit[3903]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3863 pid=3903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:27.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232366465313833656539396538363161326237613330356333373731 Jul 14 22:14:27.571848 env[1215]: time="2025-07-14T22:14:27.571713284Z" level=info msg="StartContainer for \"226de183ee99e861a2b7a305c37714df112c33ec3e306660a3559ad5bf579d3c\" returns successfully" Jul 14 22:14:27.620000 audit[3914]: AVC avc: denied { getattr } for pid=3914 comm="coredns" path="cgroup:[4026532659]" dev="nsfs" ino=4026532659 scontext=system_u:system_r:svirt_lxc_net_t:s0:c254,c690 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 14 22:14:27.620000 audit[3914]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056ab0 a2=40001cc578 a3=0 items=0 ppid=3863 pid=3914 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c254,c690 key=(null) Jul 14 22:14:27.620000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 14 22:14:28.101087 kubelet[2006]: E0714 22:14:28.100983 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:14:28.112763 kubelet[2006]: I0714 22:14:28.112600 2006 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-9l5g9" podStartSLOduration=39.11258387 podStartE2EDuration="39.11258387s" podCreationTimestamp="2025-07-14 22:13:49 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 22:14:28.112167775 +0000 UTC m=+44.227341420" watchObservedRunningTime="2025-07-14 22:14:28.11258387 +0000 UTC m=+44.227757475" Jul 14 22:14:28.128000 audit[3938]: NETFILTER_CFG table=filter:101 family=2 entries=20 op=nft_register_rule pid=3938 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:28.128000 audit[3938]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffc80dbb00 a2=0 a3=1 items=0 ppid=2113 pid=3938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:28.128000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:28.136000 audit[3938]: NETFILTER_CFG table=nat:102 family=2 entries=14 op=nft_register_rule pid=3938 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:28.136000 audit[3938]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffc80dbb00 a2=0 a3=1 items=0 ppid=2113 pid=3938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:28.136000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:28.165000 audit[3940]: NETFILTER_CFG table=filter:103 family=2 entries=17 op=nft_register_rule pid=3940 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:28.165000 audit[3940]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffc4f93fe0 a2=0 a3=1 items=0 ppid=2113 pid=3940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:28.165000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:28.170000 audit[3940]: NETFILTER_CFG table=nat:104 family=2 entries=35 op=nft_register_chain pid=3940 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:28.170000 audit[3940]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffc4f93fe0 a2=0 a3=1 items=0 ppid=2113 pid=3940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:28.170000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:28.981171 env[1215]: time="2025-07-14T22:14:28.981127609Z" level=info msg="StopPodSandbox for \"bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30\"" Jul 14 22:14:28.981683 env[1215]: time="2025-07-14T22:14:28.981399593Z" level=info msg="StopPodSandbox for \"b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff\"" Jul 14 22:14:29.089223 env[1215]: 2025-07-14 22:14:29.041 [INFO][3988] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" Jul 14 22:14:29.089223 env[1215]: 2025-07-14 22:14:29.041 [INFO][3988] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" iface="eth0" netns="/var/run/netns/cni-b95344c1-c663-d4a5-d5c4-585a2941b756" Jul 14 22:14:29.089223 env[1215]: 2025-07-14 22:14:29.041 [INFO][3988] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" iface="eth0" netns="/var/run/netns/cni-b95344c1-c663-d4a5-d5c4-585a2941b756" Jul 14 22:14:29.089223 env[1215]: 2025-07-14 22:14:29.041 [INFO][3988] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" iface="eth0" netns="/var/run/netns/cni-b95344c1-c663-d4a5-d5c4-585a2941b756" Jul 14 22:14:29.089223 env[1215]: 2025-07-14 22:14:29.041 [INFO][3988] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" Jul 14 22:14:29.089223 env[1215]: 2025-07-14 22:14:29.041 [INFO][3988] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" Jul 14 22:14:29.089223 env[1215]: 2025-07-14 22:14:29.067 [INFO][4005] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" HandleID="k8s-pod-network.b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" Workload="localhost-k8s-calico--kube--controllers--88b4685f--k9zr5-eth0" Jul 14 22:14:29.089223 env[1215]: 2025-07-14 22:14:29.067 [INFO][4005] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:29.089223 env[1215]: 2025-07-14 22:14:29.068 [INFO][4005] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:29.089223 env[1215]: 2025-07-14 22:14:29.079 [WARNING][4005] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" HandleID="k8s-pod-network.b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" Workload="localhost-k8s-calico--kube--controllers--88b4685f--k9zr5-eth0" Jul 14 22:14:29.089223 env[1215]: 2025-07-14 22:14:29.079 [INFO][4005] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" HandleID="k8s-pod-network.b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" Workload="localhost-k8s-calico--kube--controllers--88b4685f--k9zr5-eth0" Jul 14 22:14:29.089223 env[1215]: 2025-07-14 22:14:29.080 [INFO][4005] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:29.089223 env[1215]: 2025-07-14 22:14:29.086 [INFO][3988] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" Jul 14 22:14:29.092020 env[1215]: time="2025-07-14T22:14:29.091515344Z" level=info msg="TearDown network for sandbox \"b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff\" successfully" Jul 14 22:14:29.092020 env[1215]: time="2025-07-14T22:14:29.091550622Z" level=info msg="StopPodSandbox for \"b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff\" returns successfully" Jul 14 22:14:29.091443 systemd[1]: run-netns-cni\x2db95344c1\x2dc663\x2dd4a5\x2dd5c4\x2d585a2941b756.mount: Deactivated successfully. Jul 14 22:14:29.092473 env[1215]: time="2025-07-14T22:14:29.092433093Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-88b4685f-k9zr5,Uid:bb8a40bd-e0ea-46bb-aab7-968e8d6511da,Namespace:calico-system,Attempt:1,}" Jul 14 22:14:29.100242 env[1215]: 2025-07-14 22:14:29.038 [INFO][3987] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" Jul 14 22:14:29.100242 env[1215]: 2025-07-14 22:14:29.039 [INFO][3987] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" iface="eth0" netns="/var/run/netns/cni-ec9cd665-c13f-0172-e517-d0c14b56b474" Jul 14 22:14:29.100242 env[1215]: 2025-07-14 22:14:29.039 [INFO][3987] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" iface="eth0" netns="/var/run/netns/cni-ec9cd665-c13f-0172-e517-d0c14b56b474" Jul 14 22:14:29.100242 env[1215]: 2025-07-14 22:14:29.039 [INFO][3987] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" iface="eth0" netns="/var/run/netns/cni-ec9cd665-c13f-0172-e517-d0c14b56b474" Jul 14 22:14:29.100242 env[1215]: 2025-07-14 22:14:29.039 [INFO][3987] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" Jul 14 22:14:29.100242 env[1215]: 2025-07-14 22:14:29.039 [INFO][3987] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" Jul 14 22:14:29.100242 env[1215]: 2025-07-14 22:14:29.077 [INFO][4003] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" HandleID="k8s-pod-network.bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" Workload="localhost-k8s-goldmane--768f4c5c69--cszg5-eth0" Jul 14 22:14:29.100242 env[1215]: 2025-07-14 22:14:29.077 [INFO][4003] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:29.100242 env[1215]: 2025-07-14 22:14:29.080 [INFO][4003] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:29.100242 env[1215]: 2025-07-14 22:14:29.094 [WARNING][4003] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" HandleID="k8s-pod-network.bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" Workload="localhost-k8s-goldmane--768f4c5c69--cszg5-eth0" Jul 14 22:14:29.100242 env[1215]: 2025-07-14 22:14:29.095 [INFO][4003] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" HandleID="k8s-pod-network.bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" Workload="localhost-k8s-goldmane--768f4c5c69--cszg5-eth0" Jul 14 22:14:29.100242 env[1215]: 2025-07-14 22:14:29.096 [INFO][4003] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:29.100242 env[1215]: 2025-07-14 22:14:29.098 [INFO][3987] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" Jul 14 22:14:29.102469 systemd[1]: run-netns-cni\x2dec9cd665\x2dc13f\x2d0172\x2de517\x2dd0c14b56b474.mount: Deactivated successfully. Jul 14 22:14:29.105600 kubelet[2006]: E0714 22:14:29.104804 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:14:29.110320 env[1215]: time="2025-07-14T22:14:29.110252034Z" level=info msg="TearDown network for sandbox \"bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30\" successfully" Jul 14 22:14:29.110320 env[1215]: time="2025-07-14T22:14:29.110313390Z" level=info msg="StopPodSandbox for \"bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30\" returns successfully" Jul 14 22:14:29.111035 env[1215]: time="2025-07-14T22:14:29.111005672Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-cszg5,Uid:873b6b5c-5253-4b84-b586-5af9f7e09daa,Namespace:calico-system,Attempt:1,}" Jul 14 22:14:29.170846 systemd-networkd[1039]: cali131996a9cb5: Gained IPv6LL Jul 14 22:14:29.188901 kubelet[2006]: I0714 22:14:29.188765 2006 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 22:14:29.189622 kubelet[2006]: E0714 22:14:29.189281 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:14:29.234854 systemd-networkd[1039]: calia2bca902ab0: Gained IPv6LL Jul 14 22:14:29.261134 systemd-networkd[1039]: calic186b148933: Link UP Jul 14 22:14:29.262906 systemd-networkd[1039]: calic186b148933: Gained carrier Jul 14 22:14:29.265748 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic186b148933: link becomes ready Jul 14 22:14:29.265000 audit[4066]: NETFILTER_CFG table=filter:105 family=2 entries=13 op=nft_register_rule pid=4066 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:29.265000 audit[4066]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffcae0f120 a2=0 a3=1 items=0 ppid=2113 pid=4066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:29.265000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:29.271000 audit[4066]: NETFILTER_CFG table=nat:106 family=2 entries=27 op=nft_register_chain pid=4066 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:29.271000 audit[4066]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=9348 a0=3 a1=ffffcae0f120 a2=0 a3=1 items=0 ppid=2113 pid=4066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:29.271000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:29.277836 env[1215]: 2025-07-14 22:14:29.136 [INFO][4018] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 14 22:14:29.277836 env[1215]: 2025-07-14 22:14:29.150 [INFO][4018] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--88b4685f--k9zr5-eth0 calico-kube-controllers-88b4685f- calico-system bb8a40bd-e0ea-46bb-aab7-968e8d6511da 970 0 2025-07-14 22:14:08 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:88b4685f projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-88b4685f-k9zr5 eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calic186b148933 [] [] }} ContainerID="9b9397e94452efcff7cd71432100cafe81126d23bfb6814017d4ec5c9a865bec" Namespace="calico-system" Pod="calico-kube-controllers-88b4685f-k9zr5" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--88b4685f--k9zr5-" Jul 14 22:14:29.277836 env[1215]: 2025-07-14 22:14:29.150 [INFO][4018] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="9b9397e94452efcff7cd71432100cafe81126d23bfb6814017d4ec5c9a865bec" Namespace="calico-system" Pod="calico-kube-controllers-88b4685f-k9zr5" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--88b4685f--k9zr5-eth0" Jul 14 22:14:29.277836 env[1215]: 2025-07-14 22:14:29.179 [INFO][4049] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9b9397e94452efcff7cd71432100cafe81126d23bfb6814017d4ec5c9a865bec" HandleID="k8s-pod-network.9b9397e94452efcff7cd71432100cafe81126d23bfb6814017d4ec5c9a865bec" Workload="localhost-k8s-calico--kube--controllers--88b4685f--k9zr5-eth0" Jul 14 22:14:29.277836 env[1215]: 2025-07-14 22:14:29.179 [INFO][4049] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="9b9397e94452efcff7cd71432100cafe81126d23bfb6814017d4ec5c9a865bec" HandleID="k8s-pod-network.9b9397e94452efcff7cd71432100cafe81126d23bfb6814017d4ec5c9a865bec" Workload="localhost-k8s-calico--kube--controllers--88b4685f--k9zr5-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002e50f0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-88b4685f-k9zr5", "timestamp":"2025-07-14 22:14:29.179465468 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 22:14:29.277836 env[1215]: 2025-07-14 22:14:29.179 [INFO][4049] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:29.277836 env[1215]: 2025-07-14 22:14:29.179 [INFO][4049] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:29.277836 env[1215]: 2025-07-14 22:14:29.179 [INFO][4049] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 22:14:29.277836 env[1215]: 2025-07-14 22:14:29.195 [INFO][4049] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.9b9397e94452efcff7cd71432100cafe81126d23bfb6814017d4ec5c9a865bec" host="localhost" Jul 14 22:14:29.277836 env[1215]: 2025-07-14 22:14:29.200 [INFO][4049] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 22:14:29.277836 env[1215]: 2025-07-14 22:14:29.213 [INFO][4049] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 22:14:29.277836 env[1215]: 2025-07-14 22:14:29.227 [INFO][4049] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 22:14:29.277836 env[1215]: 2025-07-14 22:14:29.234 [INFO][4049] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 22:14:29.277836 env[1215]: 2025-07-14 22:14:29.234 [INFO][4049] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.9b9397e94452efcff7cd71432100cafe81126d23bfb6814017d4ec5c9a865bec" host="localhost" Jul 14 22:14:29.277836 env[1215]: 2025-07-14 22:14:29.238 [INFO][4049] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.9b9397e94452efcff7cd71432100cafe81126d23bfb6814017d4ec5c9a865bec Jul 14 22:14:29.277836 env[1215]: 2025-07-14 22:14:29.248 [INFO][4049] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.9b9397e94452efcff7cd71432100cafe81126d23bfb6814017d4ec5c9a865bec" host="localhost" Jul 14 22:14:29.277836 env[1215]: 2025-07-14 22:14:29.255 [INFO][4049] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.9b9397e94452efcff7cd71432100cafe81126d23bfb6814017d4ec5c9a865bec" host="localhost" Jul 14 22:14:29.277836 env[1215]: 2025-07-14 22:14:29.255 [INFO][4049] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.9b9397e94452efcff7cd71432100cafe81126d23bfb6814017d4ec5c9a865bec" host="localhost" Jul 14 22:14:29.277836 env[1215]: 2025-07-14 22:14:29.255 [INFO][4049] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:29.277836 env[1215]: 2025-07-14 22:14:29.256 [INFO][4049] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="9b9397e94452efcff7cd71432100cafe81126d23bfb6814017d4ec5c9a865bec" HandleID="k8s-pod-network.9b9397e94452efcff7cd71432100cafe81126d23bfb6814017d4ec5c9a865bec" Workload="localhost-k8s-calico--kube--controllers--88b4685f--k9zr5-eth0" Jul 14 22:14:29.278554 env[1215]: 2025-07-14 22:14:29.259 [INFO][4018] cni-plugin/k8s.go 418: Populated endpoint ContainerID="9b9397e94452efcff7cd71432100cafe81126d23bfb6814017d4ec5c9a865bec" Namespace="calico-system" Pod="calico-kube-controllers-88b4685f-k9zr5" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--88b4685f--k9zr5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--88b4685f--k9zr5-eth0", GenerateName:"calico-kube-controllers-88b4685f-", Namespace:"calico-system", SelfLink:"", UID:"bb8a40bd-e0ea-46bb-aab7-968e8d6511da", ResourceVersion:"970", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 14, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"88b4685f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-88b4685f-k9zr5", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calic186b148933", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:29.278554 env[1215]: 2025-07-14 22:14:29.259 [INFO][4018] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="9b9397e94452efcff7cd71432100cafe81126d23bfb6814017d4ec5c9a865bec" Namespace="calico-system" Pod="calico-kube-controllers-88b4685f-k9zr5" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--88b4685f--k9zr5-eth0" Jul 14 22:14:29.278554 env[1215]: 2025-07-14 22:14:29.259 [INFO][4018] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic186b148933 ContainerID="9b9397e94452efcff7cd71432100cafe81126d23bfb6814017d4ec5c9a865bec" Namespace="calico-system" Pod="calico-kube-controllers-88b4685f-k9zr5" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--88b4685f--k9zr5-eth0" Jul 14 22:14:29.278554 env[1215]: 2025-07-14 22:14:29.264 [INFO][4018] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="9b9397e94452efcff7cd71432100cafe81126d23bfb6814017d4ec5c9a865bec" Namespace="calico-system" Pod="calico-kube-controllers-88b4685f-k9zr5" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--88b4685f--k9zr5-eth0" Jul 14 22:14:29.278554 env[1215]: 2025-07-14 22:14:29.265 [INFO][4018] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="9b9397e94452efcff7cd71432100cafe81126d23bfb6814017d4ec5c9a865bec" Namespace="calico-system" Pod="calico-kube-controllers-88b4685f-k9zr5" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--88b4685f--k9zr5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--88b4685f--k9zr5-eth0", GenerateName:"calico-kube-controllers-88b4685f-", Namespace:"calico-system", SelfLink:"", UID:"bb8a40bd-e0ea-46bb-aab7-968e8d6511da", ResourceVersion:"970", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 14, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"88b4685f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9b9397e94452efcff7cd71432100cafe81126d23bfb6814017d4ec5c9a865bec", Pod:"calico-kube-controllers-88b4685f-k9zr5", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calic186b148933", MAC:"d2:cf:9e:e2:a7:f6", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:29.278554 env[1215]: 2025-07-14 22:14:29.275 [INFO][4018] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="9b9397e94452efcff7cd71432100cafe81126d23bfb6814017d4ec5c9a865bec" Namespace="calico-system" Pod="calico-kube-controllers-88b4685f-k9zr5" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--88b4685f--k9zr5-eth0" Jul 14 22:14:29.279113 env[1215]: time="2025-07-14T22:14:29.279064792Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:29.281184 env[1215]: time="2025-07-14T22:14:29.281139518Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:29.283457 env[1215]: time="2025-07-14T22:14:29.282961098Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:29.284901 env[1215]: time="2025-07-14T22:14:29.284870673Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:29.285371 env[1215]: time="2025-07-14T22:14:29.285337607Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Jul 14 22:14:29.289854 env[1215]: time="2025-07-14T22:14:29.289819361Z" level=info msg="CreateContainer within sandbox \"d8f75969780479587fd6bea002c09656005b7fd9c8ae375761e6f2c574d77882\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 14 22:14:29.290786 env[1215]: time="2025-07-14T22:14:29.290708152Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:14:29.290857 env[1215]: time="2025-07-14T22:14:29.290800787Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:14:29.290857 env[1215]: time="2025-07-14T22:14:29.290828385Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:14:29.291207 env[1215]: time="2025-07-14T22:14:29.291167927Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9b9397e94452efcff7cd71432100cafe81126d23bfb6814017d4ec5c9a865bec pid=4081 runtime=io.containerd.runc.v2 Jul 14 22:14:29.307094 systemd[1]: Started cri-containerd-9b9397e94452efcff7cd71432100cafe81126d23bfb6814017d4ec5c9a865bec.scope. Jul 14 22:14:29.308621 env[1215]: time="2025-07-14T22:14:29.308578529Z" level=info msg="CreateContainer within sandbox \"d8f75969780479587fd6bea002c09656005b7fd9c8ae375761e6f2c574d77882\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"46dd77eafd81e8fcbb477da1bd70224373f3a947652683f667e7081ec4c2f6aa\"" Jul 14 22:14:29.310403 env[1215]: time="2025-07-14T22:14:29.309957893Z" level=info msg="StartContainer for \"46dd77eafd81e8fcbb477da1bd70224373f3a947652683f667e7081ec4c2f6aa\"" Jul 14 22:14:29.343078 systemd[1]: Started cri-containerd-46dd77eafd81e8fcbb477da1bd70224373f3a947652683f667e7081ec4c2f6aa.scope. Jul 14 22:14:29.360923 systemd-networkd[1039]: cali0146478b856: Link UP Jul 14 22:14:29.364778 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0146478b856: link becomes ready Jul 14 22:14:29.364902 systemd-networkd[1039]: cali0146478b856: Gained carrier Jul 14 22:14:29.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.386000 audit: BPF prog-id=166 op=LOAD Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { bpf } for pid=4115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit[4115]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3816 pid=4115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:29.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436646437376561666438316538666362623437376461316264373032 Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { perfmon } for pid=4115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit[4115]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3816 pid=4115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:29.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436646437376561666438316538666362623437376461316264373032 Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { bpf } for pid=4115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { bpf } for pid=4115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { bpf } for pid=4115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { perfmon } for pid=4115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { perfmon } for pid=4115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { perfmon } for pid=4115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { perfmon } for pid=4115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { perfmon } for pid=4115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { bpf } for pid=4115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { bpf } for pid=4115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit: BPF prog-id=167 op=LOAD Jul 14 22:14:29.387000 audit[4115]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3816 pid=4115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:29.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436646437376561666438316538666362623437376461316264373032 Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { bpf } for pid=4115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { bpf } for pid=4115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { perfmon } for pid=4115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { perfmon } for pid=4115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { perfmon } for pid=4115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { perfmon } for pid=4115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { perfmon } for pid=4115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { bpf } for pid=4115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { bpf } for pid=4115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit: BPF prog-id=168 op=LOAD Jul 14 22:14:29.387000 audit[4115]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3816 pid=4115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:29.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436646437376561666438316538666362623437376461316264373032 Jul 14 22:14:29.387000 audit: BPF prog-id=168 op=UNLOAD Jul 14 22:14:29.387000 audit: BPF prog-id=167 op=UNLOAD Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { bpf } for pid=4115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { bpf } for pid=4115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { bpf } for pid=4115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { perfmon } for pid=4115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { perfmon } for pid=4115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { perfmon } for pid=4115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { perfmon } for pid=4115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { perfmon } for pid=4115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { bpf } for pid=4115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit[4115]: AVC avc: denied { bpf } for pid=4115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.387000 audit: BPF prog-id=169 op=LOAD Jul 14 22:14:29.387000 audit[4115]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3816 pid=4115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:29.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436646437376561666438316538666362623437376461316264373032 Jul 14 22:14:29.389740 env[1215]: 2025-07-14 22:14:29.154 [INFO][4031] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 14 22:14:29.389740 env[1215]: 2025-07-14 22:14:29.169 [INFO][4031] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--768f4c5c69--cszg5-eth0 goldmane-768f4c5c69- calico-system 873b6b5c-5253-4b84-b586-5af9f7e09daa 969 0 2025-07-14 22:14:07 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:768f4c5c69 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-768f4c5c69-cszg5 eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali0146478b856 [] [] }} ContainerID="417c2d2cd723071e4900f0de1314a4003b21d695d63a1a51a51754636487984f" Namespace="calico-system" Pod="goldmane-768f4c5c69-cszg5" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--cszg5-" Jul 14 22:14:29.389740 env[1215]: 2025-07-14 22:14:29.169 [INFO][4031] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="417c2d2cd723071e4900f0de1314a4003b21d695d63a1a51a51754636487984f" Namespace="calico-system" Pod="goldmane-768f4c5c69-cszg5" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--cszg5-eth0" Jul 14 22:14:29.389740 env[1215]: 2025-07-14 22:14:29.251 [INFO][4057] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="417c2d2cd723071e4900f0de1314a4003b21d695d63a1a51a51754636487984f" HandleID="k8s-pod-network.417c2d2cd723071e4900f0de1314a4003b21d695d63a1a51a51754636487984f" Workload="localhost-k8s-goldmane--768f4c5c69--cszg5-eth0" Jul 14 22:14:29.389740 env[1215]: 2025-07-14 22:14:29.251 [INFO][4057] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="417c2d2cd723071e4900f0de1314a4003b21d695d63a1a51a51754636487984f" HandleID="k8s-pod-network.417c2d2cd723071e4900f0de1314a4003b21d695d63a1a51a51754636487984f" Workload="localhost-k8s-goldmane--768f4c5c69--cszg5-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001a2e30), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-768f4c5c69-cszg5", "timestamp":"2025-07-14 22:14:29.251035093 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 22:14:29.389740 env[1215]: 2025-07-14 22:14:29.251 [INFO][4057] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:29.389740 env[1215]: 2025-07-14 22:14:29.256 [INFO][4057] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:29.389740 env[1215]: 2025-07-14 22:14:29.256 [INFO][4057] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 22:14:29.389740 env[1215]: 2025-07-14 22:14:29.298 [INFO][4057] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.417c2d2cd723071e4900f0de1314a4003b21d695d63a1a51a51754636487984f" host="localhost" Jul 14 22:14:29.389740 env[1215]: 2025-07-14 22:14:29.306 [INFO][4057] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 22:14:29.389740 env[1215]: 2025-07-14 22:14:29.313 [INFO][4057] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 22:14:29.389740 env[1215]: 2025-07-14 22:14:29.315 [INFO][4057] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 22:14:29.389740 env[1215]: 2025-07-14 22:14:29.317 [INFO][4057] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 22:14:29.389740 env[1215]: 2025-07-14 22:14:29.317 [INFO][4057] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.417c2d2cd723071e4900f0de1314a4003b21d695d63a1a51a51754636487984f" host="localhost" Jul 14 22:14:29.389740 env[1215]: 2025-07-14 22:14:29.320 [INFO][4057] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.417c2d2cd723071e4900f0de1314a4003b21d695d63a1a51a51754636487984f Jul 14 22:14:29.389740 env[1215]: 2025-07-14 22:14:29.326 [INFO][4057] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.417c2d2cd723071e4900f0de1314a4003b21d695d63a1a51a51754636487984f" host="localhost" Jul 14 22:14:29.389740 env[1215]: 2025-07-14 22:14:29.337 [INFO][4057] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.417c2d2cd723071e4900f0de1314a4003b21d695d63a1a51a51754636487984f" host="localhost" Jul 14 22:14:29.389740 env[1215]: 2025-07-14 22:14:29.337 [INFO][4057] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.417c2d2cd723071e4900f0de1314a4003b21d695d63a1a51a51754636487984f" host="localhost" Jul 14 22:14:29.389740 env[1215]: 2025-07-14 22:14:29.337 [INFO][4057] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:29.389740 env[1215]: 2025-07-14 22:14:29.337 [INFO][4057] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="417c2d2cd723071e4900f0de1314a4003b21d695d63a1a51a51754636487984f" HandleID="k8s-pod-network.417c2d2cd723071e4900f0de1314a4003b21d695d63a1a51a51754636487984f" Workload="localhost-k8s-goldmane--768f4c5c69--cszg5-eth0" Jul 14 22:14:29.390323 env[1215]: 2025-07-14 22:14:29.358 [INFO][4031] cni-plugin/k8s.go 418: Populated endpoint ContainerID="417c2d2cd723071e4900f0de1314a4003b21d695d63a1a51a51754636487984f" Namespace="calico-system" Pod="goldmane-768f4c5c69-cszg5" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--cszg5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--cszg5-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"873b6b5c-5253-4b84-b586-5af9f7e09daa", ResourceVersion:"969", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 14, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-768f4c5c69-cszg5", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali0146478b856", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:29.390323 env[1215]: 2025-07-14 22:14:29.358 [INFO][4031] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="417c2d2cd723071e4900f0de1314a4003b21d695d63a1a51a51754636487984f" Namespace="calico-system" Pod="goldmane-768f4c5c69-cszg5" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--cszg5-eth0" Jul 14 22:14:29.390323 env[1215]: 2025-07-14 22:14:29.358 [INFO][4031] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali0146478b856 ContainerID="417c2d2cd723071e4900f0de1314a4003b21d695d63a1a51a51754636487984f" Namespace="calico-system" Pod="goldmane-768f4c5c69-cszg5" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--cszg5-eth0" Jul 14 22:14:29.390323 env[1215]: 2025-07-14 22:14:29.361 [INFO][4031] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="417c2d2cd723071e4900f0de1314a4003b21d695d63a1a51a51754636487984f" Namespace="calico-system" Pod="goldmane-768f4c5c69-cszg5" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--cszg5-eth0" Jul 14 22:14:29.390323 env[1215]: 2025-07-14 22:14:29.364 [INFO][4031] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="417c2d2cd723071e4900f0de1314a4003b21d695d63a1a51a51754636487984f" Namespace="calico-system" Pod="goldmane-768f4c5c69-cszg5" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--cszg5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--cszg5-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"873b6b5c-5253-4b84-b586-5af9f7e09daa", ResourceVersion:"969", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 14, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"417c2d2cd723071e4900f0de1314a4003b21d695d63a1a51a51754636487984f", Pod:"goldmane-768f4c5c69-cszg5", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali0146478b856", MAC:"ba:5a:f0:08:11:67", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:29.390323 env[1215]: 2025-07-14 22:14:29.384 [INFO][4031] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="417c2d2cd723071e4900f0de1314a4003b21d695d63a1a51a51754636487984f" Namespace="calico-system" Pod="goldmane-768f4c5c69-cszg5" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--cszg5-eth0" Jul 14 22:14:29.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.391000 audit: BPF prog-id=170 op=LOAD Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { bpf } for pid=4091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit[4091]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4081 pid=4091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:29.392000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962393339376539343435326566636666376364373134333231303063 Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { perfmon } for pid=4091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit[4091]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4081 pid=4091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:29.392000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962393339376539343435326566636666376364373134333231303063 Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { bpf } for pid=4091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { bpf } for pid=4091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { bpf } for pid=4091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { perfmon } for pid=4091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { perfmon } for pid=4091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { perfmon } for pid=4091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { perfmon } for pid=4091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { perfmon } for pid=4091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { bpf } for pid=4091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { bpf } for pid=4091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit: BPF prog-id=171 op=LOAD Jul 14 22:14:29.392000 audit[4091]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4081 pid=4091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:29.392000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962393339376539343435326566636666376364373134333231303063 Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { bpf } for pid=4091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { bpf } for pid=4091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { perfmon } for pid=4091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { perfmon } for pid=4091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { perfmon } for pid=4091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { perfmon } for pid=4091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { perfmon } for pid=4091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { bpf } for pid=4091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { bpf } for pid=4091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit: BPF prog-id=172 op=LOAD Jul 14 22:14:29.392000 audit[4091]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4081 pid=4091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:29.392000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962393339376539343435326566636666376364373134333231303063 Jul 14 22:14:29.392000 audit: BPF prog-id=172 op=UNLOAD Jul 14 22:14:29.392000 audit: BPF prog-id=171 op=UNLOAD Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { bpf } for pid=4091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { bpf } for pid=4091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { bpf } for pid=4091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { perfmon } for pid=4091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { perfmon } for pid=4091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { perfmon } for pid=4091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { perfmon } for pid=4091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { perfmon } for pid=4091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { bpf } for pid=4091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit[4091]: AVC avc: denied { bpf } for pid=4091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.392000 audit: BPF prog-id=173 op=LOAD Jul 14 22:14:29.392000 audit[4091]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4081 pid=4091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:29.392000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962393339376539343435326566636666376364373134333231303063 Jul 14 22:14:29.397774 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 22:14:29.427655 env[1215]: time="2025-07-14T22:14:29.427611625Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-88b4685f-k9zr5,Uid:bb8a40bd-e0ea-46bb-aab7-968e8d6511da,Namespace:calico-system,Attempt:1,} returns sandbox id \"9b9397e94452efcff7cd71432100cafe81126d23bfb6814017d4ec5c9a865bec\"" Jul 14 22:14:29.435443 env[1215]: time="2025-07-14T22:14:29.435350439Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 14 22:14:29.467562 env[1215]: time="2025-07-14T22:14:29.467508311Z" level=info msg="StartContainer for \"46dd77eafd81e8fcbb477da1bd70224373f3a947652683f667e7081ec4c2f6aa\" returns successfully" Jul 14 22:14:29.475656 env[1215]: time="2025-07-14T22:14:29.475588067Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:14:29.475830 env[1215]: time="2025-07-14T22:14:29.475631824Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:14:29.475830 env[1215]: time="2025-07-14T22:14:29.475651383Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:14:29.476067 env[1215]: time="2025-07-14T22:14:29.476022083Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/417c2d2cd723071e4900f0de1314a4003b21d695d63a1a51a51754636487984f pid=4185 runtime=io.containerd.runc.v2 Jul 14 22:14:29.488306 systemd[1]: Started cri-containerd-417c2d2cd723071e4900f0de1314a4003b21d695d63a1a51a51754636487984f.scope. Jul 14 22:14:29.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.517000 audit: BPF prog-id=174 op=LOAD Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit[4195]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4185 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:29.518000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431376332643263643732333037316534393030663064653133313461 Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit[4195]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4185 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:29.518000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431376332643263643732333037316534393030663064653133313461 Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit: BPF prog-id=175 op=LOAD Jul 14 22:14:29.518000 audit[4195]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4185 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:29.518000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431376332643263643732333037316534393030663064653133313461 Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit: BPF prog-id=176 op=LOAD Jul 14 22:14:29.518000 audit[4195]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4185 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:29.518000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431376332643263643732333037316534393030663064653133313461 Jul 14 22:14:29.518000 audit: BPF prog-id=176 op=UNLOAD Jul 14 22:14:29.518000 audit: BPF prog-id=175 op=UNLOAD Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:29.518000 audit: BPF prog-id=177 op=LOAD Jul 14 22:14:29.518000 audit[4195]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4185 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:29.518000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431376332643263643732333037316534393030663064653133313461 Jul 14 22:14:29.521740 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 22:14:29.544573 env[1215]: time="2025-07-14T22:14:29.544533596Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-cszg5,Uid:873b6b5c-5253-4b84-b586-5af9f7e09daa,Namespace:calico-system,Attempt:1,} returns sandbox id \"417c2d2cd723071e4900f0de1314a4003b21d695d63a1a51a51754636487984f\"" Jul 14 22:14:30.079000 audit[4265]: AVC avc: denied { bpf } for pid=4265 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.079000 audit[4265]: AVC avc: denied { bpf } for pid=4265 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.079000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.079000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.079000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.079000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.079000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.079000 audit[4265]: AVC avc: denied { bpf } for pid=4265 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.079000 audit[4265]: AVC avc: denied { bpf } for pid=4265 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.079000 audit: BPF prog-id=178 op=LOAD Jul 14 22:14:30.079000 audit[4265]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff7e8f988 a2=98 a3=fffff7e8f978 items=0 ppid=4248 pid=4265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.079000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 22:14:30.079000 audit: BPF prog-id=178 op=UNLOAD Jul 14 22:14:30.079000 audit[4265]: AVC avc: denied { bpf } for pid=4265 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.079000 audit[4265]: AVC avc: denied { bpf } for pid=4265 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.079000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.079000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.079000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.079000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.079000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.079000 audit[4265]: AVC avc: denied { bpf } for pid=4265 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.079000 audit[4265]: AVC avc: denied { bpf } for pid=4265 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.079000 audit: BPF prog-id=179 op=LOAD Jul 14 22:14:30.079000 audit[4265]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff7e8f838 a2=74 a3=95 items=0 ppid=4248 pid=4265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.079000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 22:14:30.080000 audit: BPF prog-id=179 op=UNLOAD Jul 14 22:14:30.080000 audit[4265]: AVC avc: denied { bpf } for pid=4265 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.080000 audit[4265]: AVC avc: denied { bpf } for pid=4265 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.080000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.080000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.080000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.080000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.080000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.080000 audit[4265]: AVC avc: denied { bpf } for pid=4265 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.080000 audit[4265]: AVC avc: denied { bpf } for pid=4265 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.080000 audit: BPF prog-id=180 op=LOAD Jul 14 22:14:30.080000 audit[4265]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff7e8f868 a2=40 a3=fffff7e8f898 items=0 ppid=4248 pid=4265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.080000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 22:14:30.080000 audit: BPF prog-id=180 op=UNLOAD Jul 14 22:14:30.080000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.080000 audit[4265]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=fffff7e8f980 a2=50 a3=0 items=0 ppid=4248 pid=4265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.080000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 22:14:30.083000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.083000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.083000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.083000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.083000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.083000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.083000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.083000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.083000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.083000 audit: BPF prog-id=181 op=LOAD Jul 14 22:14:30.083000 audit[4266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe6dc4178 a2=98 a3=ffffe6dc4168 items=0 ppid=4248 pid=4266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.083000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:14:30.083000 audit: BPF prog-id=181 op=UNLOAD Jul 14 22:14:30.083000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.083000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.083000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.083000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.083000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.083000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.083000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.083000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.083000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.083000 audit: BPF prog-id=182 op=LOAD Jul 14 22:14:30.083000 audit[4266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe6dc3e08 a2=74 a3=95 items=0 ppid=4248 pid=4266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.083000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:14:30.083000 audit: BPF prog-id=182 op=UNLOAD Jul 14 22:14:30.083000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.083000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.083000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.083000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.083000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.083000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.083000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.083000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.083000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.083000 audit: BPF prog-id=183 op=LOAD Jul 14 22:14:30.083000 audit[4266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe6dc3e68 a2=94 a3=2 items=0 ppid=4248 pid=4266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.083000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:14:30.083000 audit: BPF prog-id=183 op=UNLOAD Jul 14 22:14:30.118702 kubelet[2006]: E0714 22:14:30.118621 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:14:30.119160 kubelet[2006]: E0714 22:14:30.118802 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:14:30.127965 kubelet[2006]: I0714 22:14:30.127699 2006 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-74cfd4cbdb-6xqzx" podStartSLOduration=24.265965393 podStartE2EDuration="26.127685129s" podCreationTimestamp="2025-07-14 22:14:04 +0000 UTC" firstStartedPulling="2025-07-14 22:14:27.424716571 +0000 UTC m=+43.539890216" lastFinishedPulling="2025-07-14 22:14:29.286436307 +0000 UTC m=+45.401609952" observedRunningTime="2025-07-14 22:14:30.126396075 +0000 UTC m=+46.241569720" watchObservedRunningTime="2025-07-14 22:14:30.127685129 +0000 UTC m=+46.242858774" Jul 14 22:14:30.144000 audit[4268]: NETFILTER_CFG table=filter:107 family=2 entries=12 op=nft_register_rule pid=4268 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:30.148556 kernel: kauditd_printk_skb: 440 callbacks suppressed Jul 14 22:14:30.148644 kernel: audit: type=1325 audit(1752531270.144:1210): table=filter:107 family=2 entries=12 op=nft_register_rule pid=4268 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:30.148678 kernel: audit: type=1300 audit(1752531270.144:1210): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffe2fdbeb0 a2=0 a3=1 items=0 ppid=2113 pid=4268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.144000 audit[4268]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffe2fdbeb0 a2=0 a3=1 items=0 ppid=2113 pid=4268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.144000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:30.154387 kernel: audit: type=1327 audit(1752531270.144:1210): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:30.159000 audit[4268]: NETFILTER_CFG table=nat:108 family=2 entries=22 op=nft_register_rule pid=4268 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:30.159000 audit[4268]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffe2fdbeb0 a2=0 a3=1 items=0 ppid=2113 pid=4268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.167356 kernel: audit: type=1325 audit(1752531270.159:1211): table=nat:108 family=2 entries=22 op=nft_register_rule pid=4268 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:30.167402 kernel: audit: type=1300 audit(1752531270.159:1211): arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffe2fdbeb0 a2=0 a3=1 items=0 ppid=2113 pid=4268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.167425 kernel: audit: type=1327 audit(1752531270.159:1211): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:30.159000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:30.177000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.177000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.184778 kernel: audit: type=1400 audit(1752531270.177:1212): avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.184850 kernel: audit: type=1400 audit(1752531270.177:1212): avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.184881 kernel: audit: type=1400 audit(1752531270.177:1212): avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.177000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.177000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.189957 kernel: audit: type=1400 audit(1752531270.177:1212): avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.177000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.177000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.177000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.177000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.177000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.177000 audit: BPF prog-id=184 op=LOAD Jul 14 22:14:30.177000 audit[4266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe6dc3e28 a2=40 a3=ffffe6dc3e58 items=0 ppid=4248 pid=4266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.177000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:14:30.183000 audit: BPF prog-id=184 op=UNLOAD Jul 14 22:14:30.183000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.183000 audit[4266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffe6dc3f40 a2=50 a3=0 items=0 ppid=4248 pid=4266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.183000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe6dc3e98 a2=28 a3=ffffe6dc3fc8 items=0 ppid=4248 pid=4266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.193000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe6dc3ec8 a2=28 a3=ffffe6dc3ff8 items=0 ppid=4248 pid=4266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.193000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe6dc3d78 a2=28 a3=ffffe6dc3ea8 items=0 ppid=4248 pid=4266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.193000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe6dc3ee8 a2=28 a3=ffffe6dc4018 items=0 ppid=4248 pid=4266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.193000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe6dc3ec8 a2=28 a3=ffffe6dc3ff8 items=0 ppid=4248 pid=4266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.193000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe6dc3eb8 a2=28 a3=ffffe6dc3fe8 items=0 ppid=4248 pid=4266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.193000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe6dc3ee8 a2=28 a3=ffffe6dc4018 items=0 ppid=4248 pid=4266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.193000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe6dc3ec8 a2=28 a3=ffffe6dc3ff8 items=0 ppid=4248 pid=4266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.193000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe6dc3ee8 a2=28 a3=ffffe6dc4018 items=0 ppid=4248 pid=4266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.193000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe6dc3eb8 a2=28 a3=ffffe6dc3fe8 items=0 ppid=4248 pid=4266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.193000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe6dc3f38 a2=28 a3=ffffe6dc4078 items=0 ppid=4248 pid=4266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.193000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffe6dc3c70 a2=50 a3=0 items=0 ppid=4248 pid=4266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.193000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit: BPF prog-id=185 op=LOAD Jul 14 22:14:30.193000 audit[4266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe6dc3c78 a2=94 a3=5 items=0 ppid=4248 pid=4266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.193000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:14:30.193000 audit: BPF prog-id=185 op=UNLOAD Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffe6dc3d80 a2=50 a3=0 items=0 ppid=4248 pid=4266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.193000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffe6dc3ec8 a2=4 a3=3 items=0 ppid=4248 pid=4266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.193000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.193000 audit[4266]: AVC avc: denied { confidentiality } for pid=4266 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 22:14:30.193000 audit[4266]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe6dc3ea8 a2=94 a3=6 items=0 ppid=4248 pid=4266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.193000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:14:30.194000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.194000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.194000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.194000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.194000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.194000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.194000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.194000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.194000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.194000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.194000 audit[4266]: AVC avc: denied { confidentiality } for pid=4266 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 22:14:30.194000 audit[4266]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe6dc3678 a2=94 a3=83 items=0 ppid=4248 pid=4266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.194000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:14:30.194000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.194000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.194000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.194000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.194000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.194000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.194000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.194000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.194000 audit[4266]: AVC avc: denied { perfmon } for pid=4266 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.194000 audit[4266]: AVC avc: denied { bpf } for pid=4266 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.194000 audit[4266]: AVC avc: denied { confidentiality } for pid=4266 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 22:14:30.194000 audit[4266]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe6dc3678 a2=94 a3=83 items=0 ppid=4248 pid=4266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.194000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:14:30.210000 audit[4271]: AVC avc: denied { bpf } for pid=4271 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.210000 audit[4271]: AVC avc: denied { bpf } for pid=4271 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.210000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.210000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.210000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.210000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.210000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.210000 audit[4271]: AVC avc: denied { bpf } for pid=4271 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.210000 audit[4271]: AVC avc: denied { bpf } for pid=4271 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.210000 audit: BPF prog-id=186 op=LOAD Jul 14 22:14:30.210000 audit[4271]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcfb830c8 a2=98 a3=ffffcfb830b8 items=0 ppid=4248 pid=4271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.210000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 14 22:14:30.210000 audit: BPF prog-id=186 op=UNLOAD Jul 14 22:14:30.210000 audit[4271]: AVC avc: denied { bpf } for pid=4271 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.210000 audit[4271]: AVC avc: denied { bpf } for pid=4271 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.210000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.210000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.210000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.210000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.210000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.210000 audit[4271]: AVC avc: denied { bpf } for pid=4271 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.210000 audit[4271]: AVC avc: denied { bpf } for pid=4271 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.210000 audit: BPF prog-id=187 op=LOAD Jul 14 22:14:30.210000 audit[4271]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcfb82f78 a2=74 a3=95 items=0 ppid=4248 pid=4271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.210000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 14 22:14:30.210000 audit: BPF prog-id=187 op=UNLOAD Jul 14 22:14:30.210000 audit[4271]: AVC avc: denied { bpf } for pid=4271 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.210000 audit[4271]: AVC avc: denied { bpf } for pid=4271 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.210000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.210000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.210000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.210000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.210000 audit[4271]: AVC avc: denied { perfmon } for pid=4271 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.210000 audit[4271]: AVC avc: denied { bpf } for pid=4271 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.210000 audit[4271]: AVC avc: denied { bpf } for pid=4271 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.210000 audit: BPF prog-id=188 op=LOAD Jul 14 22:14:30.210000 audit[4271]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcfb82fa8 a2=40 a3=ffffcfb82fd8 items=0 ppid=4248 pid=4271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.210000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 14 22:14:30.211000 audit: BPF prog-id=188 op=UNLOAD Jul 14 22:14:30.284315 systemd-networkd[1039]: vxlan.calico: Link UP Jul 14 22:14:30.284324 systemd-networkd[1039]: vxlan.calico: Gained carrier Jul 14 22:14:30.321000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.321000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.321000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.321000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.321000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.321000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.321000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.321000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.321000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.321000 audit: BPF prog-id=189 op=LOAD Jul 14 22:14:30.321000 audit[4298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe6b49228 a2=98 a3=ffffe6b49218 items=0 ppid=4248 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.321000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:14:30.321000 audit: BPF prog-id=189 op=UNLOAD Jul 14 22:14:30.321000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.321000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.321000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.321000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.321000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.321000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.321000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.321000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.321000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.321000 audit: BPF prog-id=190 op=LOAD Jul 14 22:14:30.321000 audit[4298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe6b48f08 a2=74 a3=95 items=0 ppid=4248 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.321000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:14:30.322000 audit: BPF prog-id=190 op=UNLOAD Jul 14 22:14:30.322000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.322000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.322000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.322000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.322000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.322000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.322000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.322000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.322000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.322000 audit: BPF prog-id=191 op=LOAD Jul 14 22:14:30.322000 audit[4298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe6b48f68 a2=94 a3=2 items=0 ppid=4248 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.322000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:14:30.322000 audit: BPF prog-id=191 op=UNLOAD Jul 14 22:14:30.322000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.322000 audit[4298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe6b48f98 a2=28 a3=ffffe6b490c8 items=0 ppid=4248 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.322000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:14:30.322000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.322000 audit[4298]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe6b48fc8 a2=28 a3=ffffe6b490f8 items=0 ppid=4248 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.322000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:14:30.322000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.322000 audit[4298]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe6b48e78 a2=28 a3=ffffe6b48fa8 items=0 ppid=4248 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.322000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:14:30.322000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.322000 audit[4298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe6b48fe8 a2=28 a3=ffffe6b49118 items=0 ppid=4248 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.322000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:14:30.322000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.322000 audit[4298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe6b48fc8 a2=28 a3=ffffe6b490f8 items=0 ppid=4248 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.322000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:14:30.322000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.322000 audit[4298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe6b48fb8 a2=28 a3=ffffe6b490e8 items=0 ppid=4248 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.322000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:14:30.322000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.322000 audit[4298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe6b48fe8 a2=28 a3=ffffe6b49118 items=0 ppid=4248 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.322000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:14:30.322000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.322000 audit[4298]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe6b48fc8 a2=28 a3=ffffe6b490f8 items=0 ppid=4248 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.322000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:14:30.322000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.322000 audit[4298]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe6b48fe8 a2=28 a3=ffffe6b49118 items=0 ppid=4248 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.322000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:14:30.322000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.322000 audit[4298]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe6b48fb8 a2=28 a3=ffffe6b490e8 items=0 ppid=4248 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.322000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:14:30.322000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.322000 audit[4298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe6b49038 a2=28 a3=ffffe6b49178 items=0 ppid=4248 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.322000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:14:30.322000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.322000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.322000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.322000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.322000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.322000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.322000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.322000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.322000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.322000 audit: BPF prog-id=192 op=LOAD Jul 14 22:14:30.322000 audit[4298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe6b48e58 a2=40 a3=ffffe6b48e88 items=0 ppid=4248 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.322000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:14:30.322000 audit: BPF prog-id=192 op=UNLOAD Jul 14 22:14:30.323000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.323000 audit[4298]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffe6b48e80 a2=50 a3=0 items=0 ppid=4248 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.323000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:14:30.323000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.323000 audit[4298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffe6b48e80 a2=50 a3=0 items=0 ppid=4248 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.323000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:14:30.323000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.323000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.323000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.323000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.323000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.323000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.323000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.323000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.323000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.323000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.323000 audit: BPF prog-id=193 op=LOAD Jul 14 22:14:30.323000 audit[4298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe6b485e8 a2=94 a3=2 items=0 ppid=4248 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.323000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:14:30.323000 audit: BPF prog-id=193 op=UNLOAD Jul 14 22:14:30.323000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.323000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.323000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.323000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.323000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.323000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.323000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.323000 audit[4298]: AVC avc: denied { perfmon } for pid=4298 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.323000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.323000 audit[4298]: AVC avc: denied { bpf } for pid=4298 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.323000 audit: BPF prog-id=194 op=LOAD Jul 14 22:14:30.323000 audit[4298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe6b48778 a2=94 a3=30 items=0 ppid=4248 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.323000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:14:30.334000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.334000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.334000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.334000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.334000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.334000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.334000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.334000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.334000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.334000 audit: BPF prog-id=195 op=LOAD Jul 14 22:14:30.334000 audit[4300]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff3b44578 a2=98 a3=fffff3b44568 items=0 ppid=4248 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.334000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:14:30.334000 audit: BPF prog-id=195 op=UNLOAD Jul 14 22:14:30.334000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.334000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.334000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.334000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.334000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.334000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.334000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.334000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.334000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.334000 audit: BPF prog-id=196 op=LOAD Jul 14 22:14:30.334000 audit[4300]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff3b44208 a2=74 a3=95 items=0 ppid=4248 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.334000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:14:30.334000 audit: BPF prog-id=196 op=UNLOAD Jul 14 22:14:30.334000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.334000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.334000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.334000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.334000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.334000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.334000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.334000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.334000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.334000 audit: BPF prog-id=197 op=LOAD Jul 14 22:14:30.334000 audit[4300]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff3b44268 a2=94 a3=2 items=0 ppid=4248 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.334000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:14:30.334000 audit: BPF prog-id=197 op=UNLOAD Jul 14 22:14:30.486000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.486000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.486000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.486000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.486000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.486000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.486000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.486000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.486000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.486000 audit: BPF prog-id=198 op=LOAD Jul 14 22:14:30.486000 audit[4300]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff3b44228 a2=40 a3=fffff3b44258 items=0 ppid=4248 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.486000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:14:30.486000 audit: BPF prog-id=198 op=UNLOAD Jul 14 22:14:30.486000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.486000 audit[4300]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=fffff3b44340 a2=50 a3=0 items=0 ppid=4248 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.486000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff3b44298 a2=28 a3=fffff3b443c8 items=0 ppid=4248 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.495000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff3b442c8 a2=28 a3=fffff3b443f8 items=0 ppid=4248 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.495000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff3b44178 a2=28 a3=fffff3b442a8 items=0 ppid=4248 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.495000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff3b442e8 a2=28 a3=fffff3b44418 items=0 ppid=4248 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.495000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff3b442c8 a2=28 a3=fffff3b443f8 items=0 ppid=4248 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.495000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff3b442b8 a2=28 a3=fffff3b443e8 items=0 ppid=4248 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.495000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff3b442e8 a2=28 a3=fffff3b44418 items=0 ppid=4248 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.495000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff3b442c8 a2=28 a3=fffff3b443f8 items=0 ppid=4248 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.495000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff3b442e8 a2=28 a3=fffff3b44418 items=0 ppid=4248 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.495000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff3b442b8 a2=28 a3=fffff3b443e8 items=0 ppid=4248 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.495000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff3b44338 a2=28 a3=fffff3b44478 items=0 ppid=4248 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.495000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff3b44070 a2=50 a3=0 items=0 ppid=4248 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.495000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit: BPF prog-id=199 op=LOAD Jul 14 22:14:30.495000 audit[4300]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffff3b44078 a2=94 a3=5 items=0 ppid=4248 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.495000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:14:30.495000 audit: BPF prog-id=199 op=UNLOAD Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff3b44180 a2=50 a3=0 items=0 ppid=4248 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.495000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=fffff3b442c8 a2=4 a3=3 items=0 ppid=4248 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.495000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.495000 audit[4300]: AVC avc: denied { confidentiality } for pid=4300 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 22:14:30.495000 audit[4300]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff3b442a8 a2=94 a3=6 items=0 ppid=4248 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.495000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:14:30.496000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.496000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.496000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.496000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.496000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.496000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.496000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.496000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.496000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.496000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.496000 audit[4300]: AVC avc: denied { confidentiality } for pid=4300 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 22:14:30.496000 audit[4300]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff3b43a78 a2=94 a3=83 items=0 ppid=4248 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.496000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:14:30.496000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.496000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.496000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.496000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.496000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.496000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.496000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.496000 audit[4300]: AVC avc: denied { perfmon } for pid=4300 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.496000 audit[4300]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff3b43a78 a2=94 a3=83 items=0 ppid=4248 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.496000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:14:30.497000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.497000 audit[4300]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff3b454b8 a2=10 a3=fffff3b455a8 items=0 ppid=4248 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.497000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:14:30.497000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.497000 audit[4300]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff3b45378 a2=10 a3=fffff3b45468 items=0 ppid=4248 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.497000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:14:30.497000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.497000 audit[4300]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff3b452e8 a2=10 a3=fffff3b45468 items=0 ppid=4248 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.497000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:14:30.497000 audit[4300]: AVC avc: denied { bpf } for pid=4300 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:30.497000 audit[4300]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff3b452e8 a2=10 a3=fffff3b45468 items=0 ppid=4248 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.497000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:14:30.504000 audit: BPF prog-id=194 op=UNLOAD Jul 14 22:14:30.597000 audit[4336]: NETFILTER_CFG table=mangle:109 family=2 entries=16 op=nft_register_chain pid=4336 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:14:30.597000 audit[4336]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffcfed93c0 a2=0 a3=ffffb326efa8 items=0 ppid=4248 pid=4336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.597000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:14:30.601000 audit[4333]: NETFILTER_CFG table=raw:110 family=2 entries=21 op=nft_register_chain pid=4333 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:14:30.601000 audit[4333]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=ffffc030ee80 a2=0 a3=ffffa9184fa8 items=0 ppid=4248 pid=4333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.601000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:14:30.604000 audit[4332]: NETFILTER_CFG table=nat:111 family=2 entries=15 op=nft_register_chain pid=4332 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:14:30.604000 audit[4332]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffe645db50 a2=0 a3=ffffaa55bfa8 items=0 ppid=4248 pid=4332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.604000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:14:30.610000 audit[4334]: NETFILTER_CFG table=filter:112 family=2 entries=234 op=nft_register_chain pid=4334 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:14:30.610000 audit[4334]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=137032 a0=3 a1=ffffc5f21160 a2=0 a3=ffff9c78efa8 items=0 ppid=4248 pid=4334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:30.610000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:14:30.770890 systemd-networkd[1039]: cali0146478b856: Gained IPv6LL Jul 14 22:14:30.980573 env[1215]: time="2025-07-14T22:14:30.980469984Z" level=info msg="StopPodSandbox for \"0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199\"" Jul 14 22:14:30.981490 env[1215]: time="2025-07-14T22:14:30.980657014Z" level=info msg="StopPodSandbox for \"b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0\"" Jul 14 22:14:30.982765 env[1215]: time="2025-07-14T22:14:30.980662974Z" level=info msg="StopPodSandbox for \"d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6\"" Jul 14 22:14:31.069000 audit[4129]: AVC avc: denied { watch } for pid=4129 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_22_14_15.848726365/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c487,c818 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c487,c818 tclass=file permissive=0 Jul 14 22:14:31.069000 audit[4129]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4001cba4c0 a2=fc6 a3=0 items=0 ppid=3816 pid=4129 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c487,c818 key=(null) Jul 14 22:14:31.069000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 22:14:31.090882 systemd-networkd[1039]: calic186b148933: Gained IPv6LL Jul 14 22:14:31.121198 kubelet[2006]: I0714 22:14:31.121161 2006 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 22:14:31.165351 env[1215]: 2025-07-14 22:14:31.106 [INFO][4382] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" Jul 14 22:14:31.165351 env[1215]: 2025-07-14 22:14:31.106 [INFO][4382] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" iface="eth0" netns="/var/run/netns/cni-5fa561f7-580a-c4f1-ab5d-e9ca09bff39e" Jul 14 22:14:31.165351 env[1215]: 2025-07-14 22:14:31.107 [INFO][4382] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" iface="eth0" netns="/var/run/netns/cni-5fa561f7-580a-c4f1-ab5d-e9ca09bff39e" Jul 14 22:14:31.165351 env[1215]: 2025-07-14 22:14:31.107 [INFO][4382] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" iface="eth0" netns="/var/run/netns/cni-5fa561f7-580a-c4f1-ab5d-e9ca09bff39e" Jul 14 22:14:31.165351 env[1215]: 2025-07-14 22:14:31.107 [INFO][4382] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" Jul 14 22:14:31.165351 env[1215]: 2025-07-14 22:14:31.107 [INFO][4382] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" Jul 14 22:14:31.165351 env[1215]: 2025-07-14 22:14:31.145 [INFO][4406] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" HandleID="k8s-pod-network.d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" Workload="localhost-k8s-coredns--674b8bbfcf--5p6rx-eth0" Jul 14 22:14:31.165351 env[1215]: 2025-07-14 22:14:31.145 [INFO][4406] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:31.165351 env[1215]: 2025-07-14 22:14:31.145 [INFO][4406] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:31.165351 env[1215]: 2025-07-14 22:14:31.154 [WARNING][4406] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" HandleID="k8s-pod-network.d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" Workload="localhost-k8s-coredns--674b8bbfcf--5p6rx-eth0" Jul 14 22:14:31.165351 env[1215]: 2025-07-14 22:14:31.154 [INFO][4406] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" HandleID="k8s-pod-network.d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" Workload="localhost-k8s-coredns--674b8bbfcf--5p6rx-eth0" Jul 14 22:14:31.165351 env[1215]: 2025-07-14 22:14:31.156 [INFO][4406] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:31.165351 env[1215]: 2025-07-14 22:14:31.160 [INFO][4382] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" Jul 14 22:14:31.168334 env[1215]: time="2025-07-14T22:14:31.168292296Z" level=info msg="TearDown network for sandbox \"d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6\" successfully" Jul 14 22:14:31.168409 env[1215]: time="2025-07-14T22:14:31.168333014Z" level=info msg="StopPodSandbox for \"d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6\" returns successfully" Jul 14 22:14:31.169086 kubelet[2006]: E0714 22:14:31.169016 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:14:31.170312 systemd[1]: run-netns-cni\x2d5fa561f7\x2d580a\x2dc4f1\x2dab5d\x2de9ca09bff39e.mount: Deactivated successfully. Jul 14 22:14:31.173425 env[1215]: time="2025-07-14T22:14:31.173390974Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-5p6rx,Uid:315abcdd-d782-4be2-bcc4-f381a2f1b50e,Namespace:kube-system,Attempt:1,}" Jul 14 22:14:31.182479 env[1215]: 2025-07-14 22:14:31.095 [INFO][4381] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" Jul 14 22:14:31.182479 env[1215]: 2025-07-14 22:14:31.096 [INFO][4381] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" iface="eth0" netns="/var/run/netns/cni-bd674a36-72ff-5973-ae92-ff21a5163121" Jul 14 22:14:31.182479 env[1215]: 2025-07-14 22:14:31.096 [INFO][4381] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" iface="eth0" netns="/var/run/netns/cni-bd674a36-72ff-5973-ae92-ff21a5163121" Jul 14 22:14:31.182479 env[1215]: 2025-07-14 22:14:31.096 [INFO][4381] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" iface="eth0" netns="/var/run/netns/cni-bd674a36-72ff-5973-ae92-ff21a5163121" Jul 14 22:14:31.182479 env[1215]: 2025-07-14 22:14:31.096 [INFO][4381] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" Jul 14 22:14:31.182479 env[1215]: 2025-07-14 22:14:31.096 [INFO][4381] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" Jul 14 22:14:31.182479 env[1215]: 2025-07-14 22:14:31.155 [INFO][4407] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" HandleID="k8s-pod-network.0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" Workload="localhost-k8s-csi--node--driver--5sk6s-eth0" Jul 14 22:14:31.182479 env[1215]: 2025-07-14 22:14:31.155 [INFO][4407] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:31.182479 env[1215]: 2025-07-14 22:14:31.156 [INFO][4407] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:31.182479 env[1215]: 2025-07-14 22:14:31.165 [WARNING][4407] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" HandleID="k8s-pod-network.0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" Workload="localhost-k8s-csi--node--driver--5sk6s-eth0" Jul 14 22:14:31.182479 env[1215]: 2025-07-14 22:14:31.165 [INFO][4407] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" HandleID="k8s-pod-network.0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" Workload="localhost-k8s-csi--node--driver--5sk6s-eth0" Jul 14 22:14:31.182479 env[1215]: 2025-07-14 22:14:31.173 [INFO][4407] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:31.182479 env[1215]: 2025-07-14 22:14:31.178 [INFO][4381] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" Jul 14 22:14:31.183583 env[1215]: time="2025-07-14T22:14:31.183539931Z" level=info msg="TearDown network for sandbox \"0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199\" successfully" Jul 14 22:14:31.183695 env[1215]: time="2025-07-14T22:14:31.183674325Z" level=info msg="StopPodSandbox for \"0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199\" returns successfully" Jul 14 22:14:31.184563 env[1215]: time="2025-07-14T22:14:31.184524204Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-5sk6s,Uid:75f4d0f5-72b9-47b9-a4f2-494a583825cc,Namespace:calico-system,Attempt:1,}" Jul 14 22:14:31.185754 systemd[1]: run-netns-cni\x2dbd674a36\x2d72ff\x2d5973\x2dae92\x2dff21a5163121.mount: Deactivated successfully. Jul 14 22:14:31.196001 env[1215]: 2025-07-14 22:14:31.108 [INFO][4383] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" Jul 14 22:14:31.196001 env[1215]: 2025-07-14 22:14:31.108 [INFO][4383] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" iface="eth0" netns="/var/run/netns/cni-6ef57604-4975-2bd6-a89a-205a255b0531" Jul 14 22:14:31.196001 env[1215]: 2025-07-14 22:14:31.108 [INFO][4383] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" iface="eth0" netns="/var/run/netns/cni-6ef57604-4975-2bd6-a89a-205a255b0531" Jul 14 22:14:31.196001 env[1215]: 2025-07-14 22:14:31.108 [INFO][4383] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" iface="eth0" netns="/var/run/netns/cni-6ef57604-4975-2bd6-a89a-205a255b0531" Jul 14 22:14:31.196001 env[1215]: 2025-07-14 22:14:31.108 [INFO][4383] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" Jul 14 22:14:31.196001 env[1215]: 2025-07-14 22:14:31.109 [INFO][4383] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" Jul 14 22:14:31.196001 env[1215]: 2025-07-14 22:14:31.164 [INFO][4417] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" HandleID="k8s-pod-network.b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" Workload="localhost-k8s-calico--apiserver--74cfd4cbdb--f9z8h-eth0" Jul 14 22:14:31.196001 env[1215]: 2025-07-14 22:14:31.164 [INFO][4417] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:31.196001 env[1215]: 2025-07-14 22:14:31.174 [INFO][4417] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:31.196001 env[1215]: 2025-07-14 22:14:31.183 [WARNING][4417] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" HandleID="k8s-pod-network.b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" Workload="localhost-k8s-calico--apiserver--74cfd4cbdb--f9z8h-eth0" Jul 14 22:14:31.196001 env[1215]: 2025-07-14 22:14:31.183 [INFO][4417] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" HandleID="k8s-pod-network.b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" Workload="localhost-k8s-calico--apiserver--74cfd4cbdb--f9z8h-eth0" Jul 14 22:14:31.196001 env[1215]: 2025-07-14 22:14:31.192 [INFO][4417] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:31.196001 env[1215]: 2025-07-14 22:14:31.194 [INFO][4383] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" Jul 14 22:14:31.198264 systemd[1]: run-netns-cni\x2d6ef57604\x2d4975\x2d2bd6\x2da89a\x2d205a255b0531.mount: Deactivated successfully. Jul 14 22:14:31.199010 env[1215]: time="2025-07-14T22:14:31.198964958Z" level=info msg="TearDown network for sandbox \"b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0\" successfully" Jul 14 22:14:31.199010 env[1215]: time="2025-07-14T22:14:31.199007636Z" level=info msg="StopPodSandbox for \"b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0\" returns successfully" Jul 14 22:14:31.199746 env[1215]: time="2025-07-14T22:14:31.199682644Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-74cfd4cbdb-f9z8h,Uid:a309be2c-e649-4b80-9723-4bb86fe0fdd0,Namespace:calico-apiserver,Attempt:1,}" Jul 14 22:14:31.384059 systemd-networkd[1039]: cali62334d90820: Link UP Jul 14 22:14:31.386187 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 14 22:14:31.386288 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali62334d90820: link becomes ready Jul 14 22:14:31.386646 systemd-networkd[1039]: cali62334d90820: Gained carrier Jul 14 22:14:31.405185 env[1215]: 2025-07-14 22:14:31.302 [INFO][4431] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--74cfd4cbdb--f9z8h-eth0 calico-apiserver-74cfd4cbdb- calico-apiserver a309be2c-e649-4b80-9723-4bb86fe0fdd0 1004 0 2025-07-14 22:14:04 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:74cfd4cbdb projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-74cfd4cbdb-f9z8h eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali62334d90820 [] [] }} ContainerID="b3c61117323c8d0275fa98bc91a1dd96bf9a3fc9df12f2ed6650c1676b69e5b1" Namespace="calico-apiserver" Pod="calico-apiserver-74cfd4cbdb-f9z8h" WorkloadEndpoint="localhost-k8s-calico--apiserver--74cfd4cbdb--f9z8h-" Jul 14 22:14:31.405185 env[1215]: 2025-07-14 22:14:31.302 [INFO][4431] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b3c61117323c8d0275fa98bc91a1dd96bf9a3fc9df12f2ed6650c1676b69e5b1" Namespace="calico-apiserver" Pod="calico-apiserver-74cfd4cbdb-f9z8h" WorkloadEndpoint="localhost-k8s-calico--apiserver--74cfd4cbdb--f9z8h-eth0" Jul 14 22:14:31.405185 env[1215]: 2025-07-14 22:14:31.335 [INFO][4485] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b3c61117323c8d0275fa98bc91a1dd96bf9a3fc9df12f2ed6650c1676b69e5b1" HandleID="k8s-pod-network.b3c61117323c8d0275fa98bc91a1dd96bf9a3fc9df12f2ed6650c1676b69e5b1" Workload="localhost-k8s-calico--apiserver--74cfd4cbdb--f9z8h-eth0" Jul 14 22:14:31.405185 env[1215]: 2025-07-14 22:14:31.335 [INFO][4485] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b3c61117323c8d0275fa98bc91a1dd96bf9a3fc9df12f2ed6650c1676b69e5b1" HandleID="k8s-pod-network.b3c61117323c8d0275fa98bc91a1dd96bf9a3fc9df12f2ed6650c1676b69e5b1" Workload="localhost-k8s-calico--apiserver--74cfd4cbdb--f9z8h-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400034afe0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-74cfd4cbdb-f9z8h", "timestamp":"2025-07-14 22:14:31.335075526 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 22:14:31.405185 env[1215]: 2025-07-14 22:14:31.335 [INFO][4485] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:31.405185 env[1215]: 2025-07-14 22:14:31.335 [INFO][4485] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:31.405185 env[1215]: 2025-07-14 22:14:31.335 [INFO][4485] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 22:14:31.405185 env[1215]: 2025-07-14 22:14:31.352 [INFO][4485] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b3c61117323c8d0275fa98bc91a1dd96bf9a3fc9df12f2ed6650c1676b69e5b1" host="localhost" Jul 14 22:14:31.405185 env[1215]: 2025-07-14 22:14:31.359 [INFO][4485] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 22:14:31.405185 env[1215]: 2025-07-14 22:14:31.364 [INFO][4485] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 22:14:31.405185 env[1215]: 2025-07-14 22:14:31.366 [INFO][4485] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 22:14:31.405185 env[1215]: 2025-07-14 22:14:31.368 [INFO][4485] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 22:14:31.405185 env[1215]: 2025-07-14 22:14:31.368 [INFO][4485] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.b3c61117323c8d0275fa98bc91a1dd96bf9a3fc9df12f2ed6650c1676b69e5b1" host="localhost" Jul 14 22:14:31.405185 env[1215]: 2025-07-14 22:14:31.369 [INFO][4485] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b3c61117323c8d0275fa98bc91a1dd96bf9a3fc9df12f2ed6650c1676b69e5b1 Jul 14 22:14:31.405185 env[1215]: 2025-07-14 22:14:31.373 [INFO][4485] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.b3c61117323c8d0275fa98bc91a1dd96bf9a3fc9df12f2ed6650c1676b69e5b1" host="localhost" Jul 14 22:14:31.405185 env[1215]: 2025-07-14 22:14:31.379 [INFO][4485] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.b3c61117323c8d0275fa98bc91a1dd96bf9a3fc9df12f2ed6650c1676b69e5b1" host="localhost" Jul 14 22:14:31.405185 env[1215]: 2025-07-14 22:14:31.379 [INFO][4485] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.b3c61117323c8d0275fa98bc91a1dd96bf9a3fc9df12f2ed6650c1676b69e5b1" host="localhost" Jul 14 22:14:31.405185 env[1215]: 2025-07-14 22:14:31.379 [INFO][4485] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:31.405185 env[1215]: 2025-07-14 22:14:31.379 [INFO][4485] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="b3c61117323c8d0275fa98bc91a1dd96bf9a3fc9df12f2ed6650c1676b69e5b1" HandleID="k8s-pod-network.b3c61117323c8d0275fa98bc91a1dd96bf9a3fc9df12f2ed6650c1676b69e5b1" Workload="localhost-k8s-calico--apiserver--74cfd4cbdb--f9z8h-eth0" Jul 14 22:14:31.405776 env[1215]: 2025-07-14 22:14:31.382 [INFO][4431] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b3c61117323c8d0275fa98bc91a1dd96bf9a3fc9df12f2ed6650c1676b69e5b1" Namespace="calico-apiserver" Pod="calico-apiserver-74cfd4cbdb-f9z8h" WorkloadEndpoint="localhost-k8s-calico--apiserver--74cfd4cbdb--f9z8h-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--74cfd4cbdb--f9z8h-eth0", GenerateName:"calico-apiserver-74cfd4cbdb-", Namespace:"calico-apiserver", SelfLink:"", UID:"a309be2c-e649-4b80-9723-4bb86fe0fdd0", ResourceVersion:"1004", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 14, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"74cfd4cbdb", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-74cfd4cbdb-f9z8h", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali62334d90820", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:31.405776 env[1215]: 2025-07-14 22:14:31.382 [INFO][4431] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="b3c61117323c8d0275fa98bc91a1dd96bf9a3fc9df12f2ed6650c1676b69e5b1" Namespace="calico-apiserver" Pod="calico-apiserver-74cfd4cbdb-f9z8h" WorkloadEndpoint="localhost-k8s-calico--apiserver--74cfd4cbdb--f9z8h-eth0" Jul 14 22:14:31.405776 env[1215]: 2025-07-14 22:14:31.382 [INFO][4431] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali62334d90820 ContainerID="b3c61117323c8d0275fa98bc91a1dd96bf9a3fc9df12f2ed6650c1676b69e5b1" Namespace="calico-apiserver" Pod="calico-apiserver-74cfd4cbdb-f9z8h" WorkloadEndpoint="localhost-k8s-calico--apiserver--74cfd4cbdb--f9z8h-eth0" Jul 14 22:14:31.405776 env[1215]: 2025-07-14 22:14:31.388 [INFO][4431] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b3c61117323c8d0275fa98bc91a1dd96bf9a3fc9df12f2ed6650c1676b69e5b1" Namespace="calico-apiserver" Pod="calico-apiserver-74cfd4cbdb-f9z8h" WorkloadEndpoint="localhost-k8s-calico--apiserver--74cfd4cbdb--f9z8h-eth0" Jul 14 22:14:31.405776 env[1215]: 2025-07-14 22:14:31.389 [INFO][4431] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b3c61117323c8d0275fa98bc91a1dd96bf9a3fc9df12f2ed6650c1676b69e5b1" Namespace="calico-apiserver" Pod="calico-apiserver-74cfd4cbdb-f9z8h" WorkloadEndpoint="localhost-k8s-calico--apiserver--74cfd4cbdb--f9z8h-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--74cfd4cbdb--f9z8h-eth0", GenerateName:"calico-apiserver-74cfd4cbdb-", Namespace:"calico-apiserver", SelfLink:"", UID:"a309be2c-e649-4b80-9723-4bb86fe0fdd0", ResourceVersion:"1004", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 14, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"74cfd4cbdb", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b3c61117323c8d0275fa98bc91a1dd96bf9a3fc9df12f2ed6650c1676b69e5b1", Pod:"calico-apiserver-74cfd4cbdb-f9z8h", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali62334d90820", MAC:"3a:f6:a5:fb:c4:be", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:31.405776 env[1215]: 2025-07-14 22:14:31.400 [INFO][4431] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b3c61117323c8d0275fa98bc91a1dd96bf9a3fc9df12f2ed6650c1676b69e5b1" Namespace="calico-apiserver" Pod="calico-apiserver-74cfd4cbdb-f9z8h" WorkloadEndpoint="localhost-k8s-calico--apiserver--74cfd4cbdb--f9z8h-eth0" Jul 14 22:14:31.419000 audit[4521]: NETFILTER_CFG table=filter:113 family=2 entries=53 op=nft_register_chain pid=4521 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:14:31.419000 audit[4521]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=26640 a0=3 a1=ffffea501200 a2=0 a3=ffff9f691fa8 items=0 ppid=4248 pid=4521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.419000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:14:31.422292 env[1215]: time="2025-07-14T22:14:31.422184585Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:14:31.422292 env[1215]: time="2025-07-14T22:14:31.422258701Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:14:31.422292 env[1215]: time="2025-07-14T22:14:31.422269461Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:14:31.422736 env[1215]: time="2025-07-14T22:14:31.422685521Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b3c61117323c8d0275fa98bc91a1dd96bf9a3fc9df12f2ed6650c1676b69e5b1 pid=4520 runtime=io.containerd.runc.v2 Jul 14 22:14:31.428596 env[1215]: time="2025-07-14T22:14:31.428552282Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:31.430229 env[1215]: time="2025-07-14T22:14:31.430181565Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:31.431624 env[1215]: time="2025-07-14T22:14:31.431587178Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:31.435316 env[1215]: time="2025-07-14T22:14:31.435247244Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:31.435625 env[1215]: time="2025-07-14T22:14:31.435580908Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a\"" Jul 14 22:14:31.443108 systemd[1]: Started cri-containerd-b3c61117323c8d0275fa98bc91a1dd96bf9a3fc9df12f2ed6650c1676b69e5b1.scope. Jul 14 22:14:31.444859 env[1215]: time="2025-07-14T22:14:31.444800910Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 14 22:14:31.456905 env[1215]: time="2025-07-14T22:14:31.456836337Z" level=info msg="CreateContainer within sandbox \"9b9397e94452efcff7cd71432100cafe81126d23bfb6814017d4ec5c9a865bec\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 14 22:14:31.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.467000 audit: BPF prog-id=200 op=LOAD Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit[4530]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4520 pid=4530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.468000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233633631313137333233633864303237356661393862633931613164 Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit[4530]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4520 pid=4530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.468000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233633631313137333233633864303237356661393862633931613164 Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit: BPF prog-id=201 op=LOAD Jul 14 22:14:31.468000 audit[4530]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4520 pid=4530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.468000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233633631313137333233633864303237356661393862633931613164 Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit: BPF prog-id=202 op=LOAD Jul 14 22:14:31.468000 audit[4530]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4520 pid=4530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.468000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233633631313137333233633864303237356661393862633931613164 Jul 14 22:14:31.468000 audit: BPF prog-id=202 op=UNLOAD Jul 14 22:14:31.468000 audit: BPF prog-id=201 op=UNLOAD Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.468000 audit: BPF prog-id=203 op=LOAD Jul 14 22:14:31.468000 audit[4530]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4520 pid=4530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.468000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233633631313137333233633864303237356661393862633931613164 Jul 14 22:14:31.472223 env[1215]: time="2025-07-14T22:14:31.470243780Z" level=info msg="CreateContainer within sandbox \"9b9397e94452efcff7cd71432100cafe81126d23bfb6814017d4ec5c9a865bec\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"b7eb47cdf4bcc1f3a625624aee2dc2ee413efba6e1da2daa8131b9a4619bdabf\"" Jul 14 22:14:31.471903 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 22:14:31.473495 env[1215]: time="2025-07-14T22:14:31.473259837Z" level=info msg="StartContainer for \"b7eb47cdf4bcc1f3a625624aee2dc2ee413efba6e1da2daa8131b9a4619bdabf\"" Jul 14 22:14:31.475973 systemd-networkd[1039]: vxlan.calico: Gained IPv6LL Jul 14 22:14:31.505211 env[1215]: time="2025-07-14T22:14:31.505156120Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-74cfd4cbdb-f9z8h,Uid:a309be2c-e649-4b80-9723-4bb86fe0fdd0,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"b3c61117323c8d0275fa98bc91a1dd96bf9a3fc9df12f2ed6650c1676b69e5b1\"" Jul 14 22:14:31.507007 systemd[1]: Started cri-containerd-b7eb47cdf4bcc1f3a625624aee2dc2ee413efba6e1da2daa8131b9a4619bdabf.scope. Jul 14 22:14:31.518231 systemd-networkd[1039]: cali118a6b14888: Link UP Jul 14 22:14:31.520114 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali118a6b14888: link becomes ready Jul 14 22:14:31.519989 systemd-networkd[1039]: cali118a6b14888: Gained carrier Jul 14 22:14:31.522473 env[1215]: time="2025-07-14T22:14:31.522410980Z" level=info msg="CreateContainer within sandbox \"b3c61117323c8d0275fa98bc91a1dd96bf9a3fc9df12f2ed6650c1676b69e5b1\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 14 22:14:31.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.532000 audit: BPF prog-id=204 op=LOAD Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { bpf } for pid=4556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit[4556]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=4081 pid=4556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.535000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237656234376364663462636331663361363235363234616565326463 Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { perfmon } for pid=4556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit[4556]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=4081 pid=4556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.535000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237656234376364663462636331663361363235363234616565326463 Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { bpf } for pid=4556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { bpf } for pid=4556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { bpf } for pid=4556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { perfmon } for pid=4556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { perfmon } for pid=4556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { perfmon } for pid=4556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { perfmon } for pid=4556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { perfmon } for pid=4556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { bpf } for pid=4556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { bpf } for pid=4556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit: BPF prog-id=205 op=LOAD Jul 14 22:14:31.535000 audit[4556]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=4081 pid=4556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.535000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237656234376364663462636331663361363235363234616565326463 Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { bpf } for pid=4556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { bpf } for pid=4556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { perfmon } for pid=4556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { perfmon } for pid=4556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { perfmon } for pid=4556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { perfmon } for pid=4556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { perfmon } for pid=4556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { bpf } for pid=4556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { bpf } for pid=4556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit: BPF prog-id=206 op=LOAD Jul 14 22:14:31.535000 audit[4556]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=4081 pid=4556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.535000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237656234376364663462636331663361363235363234616565326463 Jul 14 22:14:31.535000 audit: BPF prog-id=206 op=UNLOAD Jul 14 22:14:31.535000 audit: BPF prog-id=205 op=UNLOAD Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { bpf } for pid=4556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { bpf } for pid=4556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { bpf } for pid=4556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { perfmon } for pid=4556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { perfmon } for pid=4556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { perfmon } for pid=4556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { perfmon } for pid=4556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { perfmon } for pid=4556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { bpf } for pid=4556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit[4556]: AVC avc: denied { bpf } for pid=4556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.535000 audit: BPF prog-id=207 op=LOAD Jul 14 22:14:31.535000 audit[4556]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=4081 pid=4556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.535000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237656234376364663462636331663361363235363234616565326463 Jul 14 22:14:31.538888 env[1215]: 2025-07-14 22:14:31.299 [INFO][4448] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--5sk6s-eth0 csi-node-driver- calico-system 75f4d0f5-72b9-47b9-a4f2-494a583825cc 1001 0 2025-07-14 22:14:08 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:8967bcb6f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-5sk6s eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali118a6b14888 [] [] }} ContainerID="0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42" Namespace="calico-system" Pod="csi-node-driver-5sk6s" WorkloadEndpoint="localhost-k8s-csi--node--driver--5sk6s-" Jul 14 22:14:31.538888 env[1215]: 2025-07-14 22:14:31.299 [INFO][4448] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42" Namespace="calico-system" Pod="csi-node-driver-5sk6s" WorkloadEndpoint="localhost-k8s-csi--node--driver--5sk6s-eth0" Jul 14 22:14:31.538888 env[1215]: 2025-07-14 22:14:31.340 [INFO][4475] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42" HandleID="k8s-pod-network.0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42" Workload="localhost-k8s-csi--node--driver--5sk6s-eth0" Jul 14 22:14:31.538888 env[1215]: 2025-07-14 22:14:31.340 [INFO][4475] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42" HandleID="k8s-pod-network.0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42" Workload="localhost-k8s-csi--node--driver--5sk6s-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400050a300), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-5sk6s", "timestamp":"2025-07-14 22:14:31.340145725 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 22:14:31.538888 env[1215]: 2025-07-14 22:14:31.340 [INFO][4475] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:31.538888 env[1215]: 2025-07-14 22:14:31.379 [INFO][4475] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:31.538888 env[1215]: 2025-07-14 22:14:31.379 [INFO][4475] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 22:14:31.538888 env[1215]: 2025-07-14 22:14:31.453 [INFO][4475] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42" host="localhost" Jul 14 22:14:31.538888 env[1215]: 2025-07-14 22:14:31.461 [INFO][4475] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 22:14:31.538888 env[1215]: 2025-07-14 22:14:31.468 [INFO][4475] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 22:14:31.538888 env[1215]: 2025-07-14 22:14:31.472 [INFO][4475] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 22:14:31.538888 env[1215]: 2025-07-14 22:14:31.474 [INFO][4475] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 22:14:31.538888 env[1215]: 2025-07-14 22:14:31.474 [INFO][4475] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42" host="localhost" Jul 14 22:14:31.538888 env[1215]: 2025-07-14 22:14:31.477 [INFO][4475] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42 Jul 14 22:14:31.538888 env[1215]: 2025-07-14 22:14:31.488 [INFO][4475] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42" host="localhost" Jul 14 22:14:31.538888 env[1215]: 2025-07-14 22:14:31.495 [INFO][4475] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42" host="localhost" Jul 14 22:14:31.538888 env[1215]: 2025-07-14 22:14:31.495 [INFO][4475] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42" host="localhost" Jul 14 22:14:31.538888 env[1215]: 2025-07-14 22:14:31.495 [INFO][4475] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:31.538888 env[1215]: 2025-07-14 22:14:31.495 [INFO][4475] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42" HandleID="k8s-pod-network.0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42" Workload="localhost-k8s-csi--node--driver--5sk6s-eth0" Jul 14 22:14:31.539410 env[1215]: 2025-07-14 22:14:31.507 [INFO][4448] cni-plugin/k8s.go 418: Populated endpoint ContainerID="0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42" Namespace="calico-system" Pod="csi-node-driver-5sk6s" WorkloadEndpoint="localhost-k8s-csi--node--driver--5sk6s-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--5sk6s-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"75f4d0f5-72b9-47b9-a4f2-494a583825cc", ResourceVersion:"1001", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 14, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-5sk6s", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali118a6b14888", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:31.539410 env[1215]: 2025-07-14 22:14:31.508 [INFO][4448] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42" Namespace="calico-system" Pod="csi-node-driver-5sk6s" WorkloadEndpoint="localhost-k8s-csi--node--driver--5sk6s-eth0" Jul 14 22:14:31.539410 env[1215]: 2025-07-14 22:14:31.508 [INFO][4448] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali118a6b14888 ContainerID="0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42" Namespace="calico-system" Pod="csi-node-driver-5sk6s" WorkloadEndpoint="localhost-k8s-csi--node--driver--5sk6s-eth0" Jul 14 22:14:31.539410 env[1215]: 2025-07-14 22:14:31.519 [INFO][4448] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42" Namespace="calico-system" Pod="csi-node-driver-5sk6s" WorkloadEndpoint="localhost-k8s-csi--node--driver--5sk6s-eth0" Jul 14 22:14:31.539410 env[1215]: 2025-07-14 22:14:31.520 [INFO][4448] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42" Namespace="calico-system" Pod="csi-node-driver-5sk6s" WorkloadEndpoint="localhost-k8s-csi--node--driver--5sk6s-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--5sk6s-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"75f4d0f5-72b9-47b9-a4f2-494a583825cc", ResourceVersion:"1001", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 14, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42", Pod:"csi-node-driver-5sk6s", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali118a6b14888", MAC:"46:1b:ba:30:26:3f", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:31.539410 env[1215]: 2025-07-14 22:14:31.532 [INFO][4448] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42" Namespace="calico-system" Pod="csi-node-driver-5sk6s" WorkloadEndpoint="localhost-k8s-csi--node--driver--5sk6s-eth0" Jul 14 22:14:31.545005 env[1215]: time="2025-07-14T22:14:31.544951228Z" level=info msg="CreateContainer within sandbox \"b3c61117323c8d0275fa98bc91a1dd96bf9a3fc9df12f2ed6650c1676b69e5b1\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"8cad4cbb6cd21cb0dee4dbf6d6f172076f21f82ab8bd74ef274a490142ee000f\"" Jul 14 22:14:31.545620 env[1215]: time="2025-07-14T22:14:31.545578598Z" level=info msg="StartContainer for \"8cad4cbb6cd21cb0dee4dbf6d6f172076f21f82ab8bd74ef274a490142ee000f\"" Jul 14 22:14:31.552000 audit[4603]: NETFILTER_CFG table=filter:114 family=2 entries=62 op=nft_register_chain pid=4603 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:14:31.552000 audit[4603]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=28368 a0=3 a1=fffff23c6420 a2=0 a3=ffff7f4ecfa8 items=0 ppid=4248 pid=4603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.552000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:14:31.558492 env[1215]: time="2025-07-14T22:14:31.558366310Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:14:31.558492 env[1215]: time="2025-07-14T22:14:31.558442387Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:14:31.558492 env[1215]: time="2025-07-14T22:14:31.558453506Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:14:31.559200 env[1215]: time="2025-07-14T22:14:31.559124714Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42 pid=4606 runtime=io.containerd.runc.v2 Jul 14 22:14:31.569029 env[1215]: time="2025-07-14T22:14:31.568972286Z" level=info msg="StartContainer for \"b7eb47cdf4bcc1f3a625624aee2dc2ee413efba6e1da2daa8131b9a4619bdabf\" returns successfully" Jul 14 22:14:31.569538 systemd[1]: Started cri-containerd-8cad4cbb6cd21cb0dee4dbf6d6f172076f21f82ab8bd74ef274a490142ee000f.scope. Jul 14 22:14:31.585980 systemd[1]: Started cri-containerd-0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42.scope. Jul 14 22:14:31.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.613000 audit: BPF prog-id=208 op=LOAD Jul 14 22:14:31.614000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.614000 audit[4608]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4520 pid=4608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.614000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863616434636262366364323163623064656534646266366436663137 Jul 14 22:14:31.614000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.614000 audit[4608]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4520 pid=4608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.614000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863616434636262366364323163623064656534646266366436663137 Jul 14 22:14:31.614000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.614000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.614000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.614000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.614000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.614000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.614000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.614000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.614000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.614000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.614000 audit: BPF prog-id=209 op=LOAD Jul 14 22:14:31.614000 audit[4608]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4520 pid=4608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.614000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863616434636262366364323163623064656534646266366436663137 Jul 14 22:14:31.614000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.614000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.614000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.614000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.614000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.614000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.614000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.614000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.614000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.614000 audit: BPF prog-id=210 op=LOAD Jul 14 22:14:31.614000 audit[4608]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4520 pid=4608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.614000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863616434636262366364323163623064656534646266366436663137 Jul 14 22:14:31.614000 audit: BPF prog-id=210 op=UNLOAD Jul 14 22:14:31.614000 audit: BPF prog-id=209 op=UNLOAD Jul 14 22:14:31.615000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.615000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.615000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.615000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.615000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.615000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.615000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.615000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.615000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.615000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.615000 audit: BPF prog-id=211 op=LOAD Jul 14 22:14:31.615000 audit[4608]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4520 pid=4608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.615000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863616434636262366364323163623064656534646266366436663137 Jul 14 22:14:31.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.624000 audit: BPF prog-id=212 op=LOAD Jul 14 22:14:31.625000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.625000 audit[4628]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=4606 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.625000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061376231666361333936666636306666386239376134626331393835 Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.626000 audit[4628]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=4606 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.626000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061376231666361333936666636306666386239376134626331393835 Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.626000 audit: BPF prog-id=213 op=LOAD Jul 14 22:14:31.626000 audit[4628]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=4606 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.626000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061376231666361333936666636306666386239376134626331393835 Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.626000 audit: BPF prog-id=214 op=LOAD Jul 14 22:14:31.626000 audit[4628]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=4606 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.626000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061376231666361333936666636306666386239376134626331393835 Jul 14 22:14:31.626000 audit: BPF prog-id=214 op=UNLOAD Jul 14 22:14:31.626000 audit: BPF prog-id=213 op=UNLOAD Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.630762 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali5d14c8a86b9: link becomes ready Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.626000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.626000 audit: BPF prog-id=215 op=LOAD Jul 14 22:14:31.626000 audit[4628]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=4606 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.626000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061376231666361333936666636306666386239376134626331393835 Jul 14 22:14:31.630233 systemd-networkd[1039]: cali5d14c8a86b9: Link UP Jul 14 22:14:31.630457 systemd-networkd[1039]: cali5d14c8a86b9: Gained carrier Jul 14 22:14:31.633302 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 22:14:31.658424 env[1215]: 2025-07-14 22:14:31.321 [INFO][4436] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--5p6rx-eth0 coredns-674b8bbfcf- kube-system 315abcdd-d782-4be2-bcc4-f381a2f1b50e 1003 0 2025-07-14 22:13:49 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-5p6rx eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali5d14c8a86b9 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="e05350c80c4505306cab841b42e8d69cb58452ada0d98001a68e998ea2f9a681" Namespace="kube-system" Pod="coredns-674b8bbfcf-5p6rx" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--5p6rx-" Jul 14 22:14:31.658424 env[1215]: 2025-07-14 22:14:31.321 [INFO][4436] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="e05350c80c4505306cab841b42e8d69cb58452ada0d98001a68e998ea2f9a681" Namespace="kube-system" Pod="coredns-674b8bbfcf-5p6rx" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--5p6rx-eth0" Jul 14 22:14:31.658424 env[1215]: 2025-07-14 22:14:31.364 [INFO][4493] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e05350c80c4505306cab841b42e8d69cb58452ada0d98001a68e998ea2f9a681" HandleID="k8s-pod-network.e05350c80c4505306cab841b42e8d69cb58452ada0d98001a68e998ea2f9a681" Workload="localhost-k8s-coredns--674b8bbfcf--5p6rx-eth0" Jul 14 22:14:31.658424 env[1215]: 2025-07-14 22:14:31.364 [INFO][4493] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="e05350c80c4505306cab841b42e8d69cb58452ada0d98001a68e998ea2f9a681" HandleID="k8s-pod-network.e05350c80c4505306cab841b42e8d69cb58452ada0d98001a68e998ea2f9a681" Workload="localhost-k8s-coredns--674b8bbfcf--5p6rx-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000254fe0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-5p6rx", "timestamp":"2025-07-14 22:14:31.364191822 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 22:14:31.658424 env[1215]: 2025-07-14 22:14:31.364 [INFO][4493] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:31.658424 env[1215]: 2025-07-14 22:14:31.495 [INFO][4493] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:31.658424 env[1215]: 2025-07-14 22:14:31.495 [INFO][4493] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 22:14:31.658424 env[1215]: 2025-07-14 22:14:31.555 [INFO][4493] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.e05350c80c4505306cab841b42e8d69cb58452ada0d98001a68e998ea2f9a681" host="localhost" Jul 14 22:14:31.658424 env[1215]: 2025-07-14 22:14:31.562 [INFO][4493] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 22:14:31.658424 env[1215]: 2025-07-14 22:14:31.569 [INFO][4493] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 22:14:31.658424 env[1215]: 2025-07-14 22:14:31.572 [INFO][4493] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 22:14:31.658424 env[1215]: 2025-07-14 22:14:31.582 [INFO][4493] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 22:14:31.658424 env[1215]: 2025-07-14 22:14:31.582 [INFO][4493] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.e05350c80c4505306cab841b42e8d69cb58452ada0d98001a68e998ea2f9a681" host="localhost" Jul 14 22:14:31.658424 env[1215]: 2025-07-14 22:14:31.586 [INFO][4493] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.e05350c80c4505306cab841b42e8d69cb58452ada0d98001a68e998ea2f9a681 Jul 14 22:14:31.658424 env[1215]: 2025-07-14 22:14:31.595 [INFO][4493] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.e05350c80c4505306cab841b42e8d69cb58452ada0d98001a68e998ea2f9a681" host="localhost" Jul 14 22:14:31.658424 env[1215]: 2025-07-14 22:14:31.607 [INFO][4493] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.e05350c80c4505306cab841b42e8d69cb58452ada0d98001a68e998ea2f9a681" host="localhost" Jul 14 22:14:31.658424 env[1215]: 2025-07-14 22:14:31.607 [INFO][4493] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.e05350c80c4505306cab841b42e8d69cb58452ada0d98001a68e998ea2f9a681" host="localhost" Jul 14 22:14:31.658424 env[1215]: 2025-07-14 22:14:31.607 [INFO][4493] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:31.658424 env[1215]: 2025-07-14 22:14:31.607 [INFO][4493] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="e05350c80c4505306cab841b42e8d69cb58452ada0d98001a68e998ea2f9a681" HandleID="k8s-pod-network.e05350c80c4505306cab841b42e8d69cb58452ada0d98001a68e998ea2f9a681" Workload="localhost-k8s-coredns--674b8bbfcf--5p6rx-eth0" Jul 14 22:14:31.659623 env[1215]: 2025-07-14 22:14:31.616 [INFO][4436] cni-plugin/k8s.go 418: Populated endpoint ContainerID="e05350c80c4505306cab841b42e8d69cb58452ada0d98001a68e998ea2f9a681" Namespace="kube-system" Pod="coredns-674b8bbfcf-5p6rx" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--5p6rx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--5p6rx-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"315abcdd-d782-4be2-bcc4-f381a2f1b50e", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 13, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-5p6rx", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali5d14c8a86b9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:31.659623 env[1215]: 2025-07-14 22:14:31.616 [INFO][4436] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="e05350c80c4505306cab841b42e8d69cb58452ada0d98001a68e998ea2f9a681" Namespace="kube-system" Pod="coredns-674b8bbfcf-5p6rx" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--5p6rx-eth0" Jul 14 22:14:31.659623 env[1215]: 2025-07-14 22:14:31.617 [INFO][4436] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali5d14c8a86b9 ContainerID="e05350c80c4505306cab841b42e8d69cb58452ada0d98001a68e998ea2f9a681" Namespace="kube-system" Pod="coredns-674b8bbfcf-5p6rx" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--5p6rx-eth0" Jul 14 22:14:31.659623 env[1215]: 2025-07-14 22:14:31.633 [INFO][4436] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="e05350c80c4505306cab841b42e8d69cb58452ada0d98001a68e998ea2f9a681" Namespace="kube-system" Pod="coredns-674b8bbfcf-5p6rx" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--5p6rx-eth0" Jul 14 22:14:31.659623 env[1215]: 2025-07-14 22:14:31.633 [INFO][4436] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="e05350c80c4505306cab841b42e8d69cb58452ada0d98001a68e998ea2f9a681" Namespace="kube-system" Pod="coredns-674b8bbfcf-5p6rx" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--5p6rx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--5p6rx-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"315abcdd-d782-4be2-bcc4-f381a2f1b50e", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 13, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e05350c80c4505306cab841b42e8d69cb58452ada0d98001a68e998ea2f9a681", Pod:"coredns-674b8bbfcf-5p6rx", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali5d14c8a86b9", MAC:"66:f0:41:a3:db:7b", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:31.659623 env[1215]: 2025-07-14 22:14:31.643 [INFO][4436] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="e05350c80c4505306cab841b42e8d69cb58452ada0d98001a68e998ea2f9a681" Namespace="kube-system" Pod="coredns-674b8bbfcf-5p6rx" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--5p6rx-eth0" Jul 14 22:14:31.659938 env[1215]: time="2025-07-14T22:14:31.659799488Z" level=info msg="StartContainer for \"8cad4cbb6cd21cb0dee4dbf6d6f172076f21f82ab8bd74ef274a490142ee000f\" returns successfully" Jul 14 22:14:31.664857 env[1215]: time="2025-07-14T22:14:31.664806730Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-5sk6s,Uid:75f4d0f5-72b9-47b9-a4f2-494a583825cc,Namespace:calico-system,Attempt:1,} returns sandbox id \"0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42\"" Jul 14 22:14:31.676874 env[1215]: time="2025-07-14T22:14:31.676702844Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:14:31.677031 env[1215]: time="2025-07-14T22:14:31.676839557Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:14:31.677031 env[1215]: time="2025-07-14T22:14:31.676851757Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:14:31.677031 env[1215]: time="2025-07-14T22:14:31.677012149Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e05350c80c4505306cab841b42e8d69cb58452ada0d98001a68e998ea2f9a681 pid=4700 runtime=io.containerd.runc.v2 Jul 14 22:14:31.681000 audit[4712]: NETFILTER_CFG table=filter:115 family=2 entries=52 op=nft_register_chain pid=4712 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:14:31.681000 audit[4712]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23892 a0=3 a1=ffffc82a6e10 a2=0 a3=ffffb5754fa8 items=0 ppid=4248 pid=4712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.681000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:14:31.691444 systemd[1]: Started cri-containerd-e05350c80c4505306cab841b42e8d69cb58452ada0d98001a68e998ea2f9a681.scope. Jul 14 22:14:31.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.713000 audit: BPF prog-id=216 op=LOAD Jul 14 22:14:31.713000 audit[4713]: AVC avc: denied { bpf } for pid=4713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.713000 audit[4713]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4700 pid=4713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.713000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530353335306338306334353035333036636162383431623432653864 Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { perfmon } for pid=4713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit[4713]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4700 pid=4713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.714000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530353335306338306334353035333036636162383431623432653864 Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { bpf } for pid=4713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { bpf } for pid=4713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { bpf } for pid=4713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { perfmon } for pid=4713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { perfmon } for pid=4713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { perfmon } for pid=4713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { perfmon } for pid=4713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { perfmon } for pid=4713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { bpf } for pid=4713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { bpf } for pid=4713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit: BPF prog-id=217 op=LOAD Jul 14 22:14:31.714000 audit[4713]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4700 pid=4713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.714000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530353335306338306334353035333036636162383431623432653864 Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { bpf } for pid=4713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { bpf } for pid=4713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { perfmon } for pid=4713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { perfmon } for pid=4713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { perfmon } for pid=4713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { perfmon } for pid=4713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { perfmon } for pid=4713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { bpf } for pid=4713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { bpf } for pid=4713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit: BPF prog-id=218 op=LOAD Jul 14 22:14:31.714000 audit[4713]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4700 pid=4713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.714000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530353335306338306334353035333036636162383431623432653864 Jul 14 22:14:31.714000 audit: BPF prog-id=218 op=UNLOAD Jul 14 22:14:31.714000 audit: BPF prog-id=217 op=UNLOAD Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { bpf } for pid=4713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { bpf } for pid=4713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { bpf } for pid=4713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { perfmon } for pid=4713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { perfmon } for pid=4713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { perfmon } for pid=4713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { perfmon } for pid=4713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { perfmon } for pid=4713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { bpf } for pid=4713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit[4713]: AVC avc: denied { bpf } for pid=4713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.714000 audit: BPF prog-id=219 op=LOAD Jul 14 22:14:31.714000 audit[4713]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4700 pid=4713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.714000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530353335306338306334353035333036636162383431623432653864 Jul 14 22:14:31.718381 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 22:14:31.741307 env[1215]: time="2025-07-14T22:14:31.741258095Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-5p6rx,Uid:315abcdd-d782-4be2-bcc4-f381a2f1b50e,Namespace:kube-system,Attempt:1,} returns sandbox id \"e05350c80c4505306cab841b42e8d69cb58452ada0d98001a68e998ea2f9a681\"" Jul 14 22:14:31.743187 kubelet[2006]: E0714 22:14:31.742663 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:14:31.747588 env[1215]: time="2025-07-14T22:14:31.747541716Z" level=info msg="CreateContainer within sandbox \"e05350c80c4505306cab841b42e8d69cb58452ada0d98001a68e998ea2f9a681\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 14 22:14:31.760934 env[1215]: time="2025-07-14T22:14:31.760805765Z" level=info msg="CreateContainer within sandbox \"e05350c80c4505306cab841b42e8d69cb58452ada0d98001a68e998ea2f9a681\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"f4f2efc042bd14e723d77ee60b9067c1e5c2761fac074f14c4dce2895f42da4f\"" Jul 14 22:14:31.761781 env[1215]: time="2025-07-14T22:14:31.761747601Z" level=info msg="StartContainer for \"f4f2efc042bd14e723d77ee60b9067c1e5c2761fac074f14c4dce2895f42da4f\"" Jul 14 22:14:31.785009 systemd[1]: Started cri-containerd-f4f2efc042bd14e723d77ee60b9067c1e5c2761fac074f14c4dce2895f42da4f.scope. Jul 14 22:14:31.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.809000 audit: BPF prog-id=220 op=LOAD Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit[4748]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4700 pid=4748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.810000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634663265666330343262643134653732336437376565363062393036 Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit[4748]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4700 pid=4748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.810000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634663265666330343262643134653732336437376565363062393036 Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit: BPF prog-id=221 op=LOAD Jul 14 22:14:31.810000 audit[4748]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4700 pid=4748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.810000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634663265666330343262643134653732336437376565363062393036 Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit: BPF prog-id=222 op=LOAD Jul 14 22:14:31.810000 audit[4748]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4700 pid=4748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.810000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634663265666330343262643134653732336437376565363062393036 Jul 14 22:14:31.810000 audit: BPF prog-id=222 op=UNLOAD Jul 14 22:14:31.810000 audit: BPF prog-id=221 op=UNLOAD Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:31.810000 audit: BPF prog-id=223 op=LOAD Jul 14 22:14:31.810000 audit[4748]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4700 pid=4748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:31.810000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634663265666330343262643134653732336437376565363062393036 Jul 14 22:14:31.828881 env[1215]: time="2025-07-14T22:14:31.828833731Z" level=info msg="StartContainer for \"f4f2efc042bd14e723d77ee60b9067c1e5c2761fac074f14c4dce2895f42da4f\" returns successfully" Jul 14 22:14:31.839000 audit[4762]: AVC avc: denied { getattr } for pid=4762 comm="coredns" path="cgroup:[4026532628]" dev="nsfs" ino=4026532628 scontext=system_u:system_r:svirt_lxc_net_t:s0:c599,c978 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 14 22:14:31.839000 audit[4762]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056a20 a2=40000da578 a3=0 items=0 ppid=4700 pid=4762 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c599,c978 key=(null) Jul 14 22:14:31.839000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 14 22:14:32.125477 kubelet[2006]: E0714 22:14:32.125440 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:14:32.141826 kubelet[2006]: I0714 22:14:32.141751 2006 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-5p6rx" podStartSLOduration=43.141717031 podStartE2EDuration="43.141717031s" podCreationTimestamp="2025-07-14 22:13:49 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 22:14:32.141249732 +0000 UTC m=+48.256423377" watchObservedRunningTime="2025-07-14 22:14:32.141717031 +0000 UTC m=+48.256890716" Jul 14 22:14:32.187000 audit[4802]: NETFILTER_CFG table=filter:116 family=2 entries=12 op=nft_register_rule pid=4802 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:32.187000 audit[4802]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffc697e090 a2=0 a3=1 items=0 ppid=2113 pid=4802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:32.187000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:32.193000 audit[4802]: NETFILTER_CFG table=nat:117 family=2 entries=46 op=nft_register_rule pid=4802 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:32.196653 kubelet[2006]: I0714 22:14:32.196198 2006 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-74cfd4cbdb-f9z8h" podStartSLOduration=28.196177875 podStartE2EDuration="28.196177875s" podCreationTimestamp="2025-07-14 22:14:04 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 22:14:32.165103283 +0000 UTC m=+48.280276928" watchObservedRunningTime="2025-07-14 22:14:32.196177875 +0000 UTC m=+48.311351480" Jul 14 22:14:32.193000 audit[4802]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14964 a0=3 a1=ffffc697e090 a2=0 a3=1 items=0 ppid=2113 pid=4802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:32.193000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:32.207535 kubelet[2006]: I0714 22:14:32.207017 2006 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-88b4685f-k9zr5" podStartSLOduration=22.197843837 podStartE2EDuration="24.207000999s" podCreationTimestamp="2025-07-14 22:14:08 +0000 UTC" firstStartedPulling="2025-07-14 22:14:29.435058375 +0000 UTC m=+45.550232020" lastFinishedPulling="2025-07-14 22:14:31.444215537 +0000 UTC m=+47.559389182" observedRunningTime="2025-07-14 22:14:32.20652022 +0000 UTC m=+48.321693905" watchObservedRunningTime="2025-07-14 22:14:32.207000999 +0000 UTC m=+48.322174644" Jul 14 22:14:32.237000 audit[4809]: NETFILTER_CFG table=filter:118 family=2 entries=12 op=nft_register_rule pid=4809 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:32.237000 audit[4809]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd6607660 a2=0 a3=1 items=0 ppid=2113 pid=4809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:32.237000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:32.271000 audit[4809]: NETFILTER_CFG table=nat:119 family=2 entries=58 op=nft_register_chain pid=4809 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:32.271000 audit[4809]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20628 a0=3 a1=ffffd6607660 a2=0 a3=1 items=0 ppid=2113 pid=4809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:32.271000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:32.819032 systemd-networkd[1039]: cali118a6b14888: Gained IPv6LL Jul 14 22:14:33.137145 kubelet[2006]: I0714 22:14:33.136682 2006 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 22:14:33.137145 kubelet[2006]: E0714 22:14:33.137113 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:14:33.139359 systemd-networkd[1039]: cali5d14c8a86b9: Gained IPv6LL Jul 14 22:14:33.139914 systemd-networkd[1039]: cali62334d90820: Gained IPv6LL Jul 14 22:14:33.823690 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4100082162.mount: Deactivated successfully. Jul 14 22:14:33.988000 audit[4646]: AVC avc: denied { watch } for pid=4646 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_22_14_15.1826281546/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c377,c1014 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c377,c1014 tclass=file permissive=0 Jul 14 22:14:33.988000 audit[4646]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4001022880 a2=fc6 a3=0 items=0 ppid=4520 pid=4646 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c377,c1014 key=(null) Jul 14 22:14:33.988000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 22:14:34.141955 kubelet[2006]: E0714 22:14:34.141861 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:14:34.480913 env[1215]: time="2025-07-14T22:14:34.480813507Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:34.482546 env[1215]: time="2025-07-14T22:14:34.482511684Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:34.484274 env[1215]: time="2025-07-14T22:14:34.484247659Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:34.486065 env[1215]: time="2025-07-14T22:14:34.486032712Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:34.486650 env[1215]: time="2025-07-14T22:14:34.486624010Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f\"" Jul 14 22:14:34.488282 env[1215]: time="2025-07-14T22:14:34.488249830Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 14 22:14:34.492417 env[1215]: time="2025-07-14T22:14:34.492384436Z" level=info msg="CreateContainer within sandbox \"417c2d2cd723071e4900f0de1314a4003b21d695d63a1a51a51754636487984f\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 14 22:14:34.505167 env[1215]: time="2025-07-14T22:14:34.505129721Z" level=info msg="CreateContainer within sandbox \"417c2d2cd723071e4900f0de1314a4003b21d695d63a1a51a51754636487984f\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"9dce805f11f3d3ed9606c794fecfa7cc6ddd86f47ec7ebbcb157241a0230c5cb\"" Jul 14 22:14:34.506762 env[1215]: time="2025-07-14T22:14:34.506705743Z" level=info msg="StartContainer for \"9dce805f11f3d3ed9606c794fecfa7cc6ddd86f47ec7ebbcb157241a0230c5cb\"" Jul 14 22:14:34.525172 systemd[1]: Started cri-containerd-9dce805f11f3d3ed9606c794fecfa7cc6ddd86f47ec7ebbcb157241a0230c5cb.scope. Jul 14 22:14:34.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.547000 audit: BPF prog-id=224 op=LOAD Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { bpf } for pid=4818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit[4818]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=4185 pid=4818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:34.548000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964636538303566313166336433656439363036633739346665636661 Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { perfmon } for pid=4818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit[4818]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=4185 pid=4818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:34.548000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964636538303566313166336433656439363036633739346665636661 Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { bpf } for pid=4818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { bpf } for pid=4818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { bpf } for pid=4818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { perfmon } for pid=4818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { perfmon } for pid=4818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { perfmon } for pid=4818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { perfmon } for pid=4818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { perfmon } for pid=4818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { bpf } for pid=4818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { bpf } for pid=4818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit: BPF prog-id=225 op=LOAD Jul 14 22:14:34.548000 audit[4818]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=4185 pid=4818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:34.548000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964636538303566313166336433656439363036633739346665636661 Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { bpf } for pid=4818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { bpf } for pid=4818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { perfmon } for pid=4818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { perfmon } for pid=4818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { perfmon } for pid=4818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { perfmon } for pid=4818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { perfmon } for pid=4818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { bpf } for pid=4818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { bpf } for pid=4818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit: BPF prog-id=226 op=LOAD Jul 14 22:14:34.548000 audit[4818]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=4185 pid=4818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:34.548000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964636538303566313166336433656439363036633739346665636661 Jul 14 22:14:34.548000 audit: BPF prog-id=226 op=UNLOAD Jul 14 22:14:34.548000 audit: BPF prog-id=225 op=UNLOAD Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { bpf } for pid=4818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { bpf } for pid=4818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { bpf } for pid=4818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { perfmon } for pid=4818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { perfmon } for pid=4818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { perfmon } for pid=4818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { perfmon } for pid=4818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { perfmon } for pid=4818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { bpf } for pid=4818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit[4818]: AVC avc: denied { bpf } for pid=4818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:34.548000 audit: BPF prog-id=227 op=LOAD Jul 14 22:14:34.548000 audit[4818]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=4185 pid=4818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:34.548000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964636538303566313166336433656439363036633739346665636661 Jul 14 22:14:34.571869 env[1215]: time="2025-07-14T22:14:34.571831318Z" level=info msg="StartContainer for \"9dce805f11f3d3ed9606c794fecfa7cc6ddd86f47ec7ebbcb157241a0230c5cb\" returns successfully" Jul 14 22:14:35.163209 kubelet[2006]: I0714 22:14:35.163060 2006 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-768f4c5c69-cszg5" podStartSLOduration=23.220770019 podStartE2EDuration="28.163028609s" podCreationTimestamp="2025-07-14 22:14:07 +0000 UTC" firstStartedPulling="2025-07-14 22:14:29.545792847 +0000 UTC m=+45.660966492" lastFinishedPulling="2025-07-14 22:14:34.488051437 +0000 UTC m=+50.603225082" observedRunningTime="2025-07-14 22:14:35.162943732 +0000 UTC m=+51.278117377" watchObservedRunningTime="2025-07-14 22:14:35.163028609 +0000 UTC m=+51.278202214" Jul 14 22:14:35.174000 audit[4866]: NETFILTER_CFG table=filter:120 family=2 entries=12 op=nft_register_rule pid=4866 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:35.178747 kernel: kauditd_printk_skb: 872 callbacks suppressed Jul 14 22:14:35.178847 kernel: audit: type=1325 audit(1752531275.174:1437): table=filter:120 family=2 entries=12 op=nft_register_rule pid=4866 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:35.174000 audit[4866]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffc036bf70 a2=0 a3=1 items=0 ppid=2113 pid=4866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:35.184686 kernel: audit: type=1300 audit(1752531275.174:1437): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffc036bf70 a2=0 a3=1 items=0 ppid=2113 pid=4866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:35.184783 kernel: audit: type=1327 audit(1752531275.174:1437): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:35.174000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:35.187000 audit[4866]: NETFILTER_CFG table=nat:121 family=2 entries=22 op=nft_register_rule pid=4866 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:35.187000 audit[4866]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffc036bf70 a2=0 a3=1 items=0 ppid=2113 pid=4866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:35.195294 kernel: audit: type=1325 audit(1752531275.187:1438): table=nat:121 family=2 entries=22 op=nft_register_rule pid=4866 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:35.195371 kernel: audit: type=1300 audit(1752531275.187:1438): arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffc036bf70 a2=0 a3=1 items=0 ppid=2113 pid=4866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:35.195396 kernel: audit: type=1327 audit(1752531275.187:1438): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:35.187000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:35.454010 env[1215]: time="2025-07-14T22:14:35.453897475Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:35.458055 env[1215]: time="2025-07-14T22:14:35.458023975Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:35.461510 env[1215]: time="2025-07-14T22:14:35.460783801Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:35.462573 env[1215]: time="2025-07-14T22:14:35.462524502Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:35.463118 env[1215]: time="2025-07-14T22:14:35.463081523Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2\"" Jul 14 22:14:35.468014 env[1215]: time="2025-07-14T22:14:35.467961277Z" level=info msg="CreateContainer within sandbox \"0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 14 22:14:35.511801 env[1215]: time="2025-07-14T22:14:35.511746667Z" level=info msg="CreateContainer within sandbox \"0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"cac521c85cde6bc3c49e71bd5ddcc217de7ff1ac7539dd16de50bbdd112397c8\"" Jul 14 22:14:35.512505 env[1215]: time="2025-07-14T22:14:35.512481082Z" level=info msg="StartContainer for \"cac521c85cde6bc3c49e71bd5ddcc217de7ff1ac7539dd16de50bbdd112397c8\"" Jul 14 22:14:35.532783 systemd[1]: Started cri-containerd-cac521c85cde6bc3c49e71bd5ddcc217de7ff1ac7539dd16de50bbdd112397c8.scope. Jul 14 22:14:35.557000 audit[4879]: AVC avc: denied { perfmon } for pid=4879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.557000 audit[4879]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=4606 pid=4879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:35.565673 kernel: audit: type=1400 audit(1752531275.557:1439): avc: denied { perfmon } for pid=4879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.565815 kernel: audit: type=1300 audit(1752531275.557:1439): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=4606 pid=4879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:35.565854 kernel: audit: type=1327 audit(1752531275.557:1439): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361633532316338356364653662633363343965373162643564646363 Jul 14 22:14:35.557000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361633532316338356364653662633363343965373162643564646363 Jul 14 22:14:35.569017 kernel: audit: type=1400 audit(1752531275.557:1440): avc: denied { bpf } for pid=4879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.557000 audit[4879]: AVC avc: denied { bpf } for pid=4879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.557000 audit[4879]: AVC avc: denied { bpf } for pid=4879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.557000 audit[4879]: AVC avc: denied { bpf } for pid=4879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.557000 audit[4879]: AVC avc: denied { perfmon } for pid=4879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.557000 audit[4879]: AVC avc: denied { perfmon } for pid=4879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.557000 audit[4879]: AVC avc: denied { perfmon } for pid=4879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.557000 audit[4879]: AVC avc: denied { perfmon } for pid=4879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.557000 audit[4879]: AVC avc: denied { perfmon } for pid=4879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.557000 audit[4879]: AVC avc: denied { bpf } for pid=4879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.557000 audit[4879]: AVC avc: denied { bpf } for pid=4879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.557000 audit: BPF prog-id=228 op=LOAD Jul 14 22:14:35.557000 audit[4879]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=4606 pid=4879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:35.557000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361633532316338356364653662633363343965373162643564646363 Jul 14 22:14:35.560000 audit[4879]: AVC avc: denied { bpf } for pid=4879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.560000 audit[4879]: AVC avc: denied { bpf } for pid=4879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.560000 audit[4879]: AVC avc: denied { perfmon } for pid=4879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.560000 audit[4879]: AVC avc: denied { perfmon } for pid=4879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.560000 audit[4879]: AVC avc: denied { perfmon } for pid=4879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.560000 audit[4879]: AVC avc: denied { perfmon } for pid=4879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.560000 audit[4879]: AVC avc: denied { perfmon } for pid=4879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.560000 audit[4879]: AVC avc: denied { bpf } for pid=4879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.560000 audit[4879]: AVC avc: denied { bpf } for pid=4879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.560000 audit: BPF prog-id=229 op=LOAD Jul 14 22:14:35.560000 audit[4879]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=4606 pid=4879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:35.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361633532316338356364653662633363343965373162643564646363 Jul 14 22:14:35.564000 audit: BPF prog-id=229 op=UNLOAD Jul 14 22:14:35.564000 audit: BPF prog-id=228 op=UNLOAD Jul 14 22:14:35.564000 audit[4879]: AVC avc: denied { bpf } for pid=4879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.564000 audit[4879]: AVC avc: denied { bpf } for pid=4879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.564000 audit[4879]: AVC avc: denied { bpf } for pid=4879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.564000 audit[4879]: AVC avc: denied { perfmon } for pid=4879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.564000 audit[4879]: AVC avc: denied { perfmon } for pid=4879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.564000 audit[4879]: AVC avc: denied { perfmon } for pid=4879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.564000 audit[4879]: AVC avc: denied { perfmon } for pid=4879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.564000 audit[4879]: AVC avc: denied { perfmon } for pid=4879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.564000 audit[4879]: AVC avc: denied { bpf } for pid=4879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.564000 audit[4879]: AVC avc: denied { bpf } for pid=4879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:35.564000 audit: BPF prog-id=230 op=LOAD Jul 14 22:14:35.564000 audit[4879]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=4606 pid=4879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:35.564000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361633532316338356364653662633363343965373162643564646363 Jul 14 22:14:35.585338 env[1215]: time="2025-07-14T22:14:35.585241927Z" level=info msg="StartContainer for \"cac521c85cde6bc3c49e71bd5ddcc217de7ff1ac7539dd16de50bbdd112397c8\" returns successfully" Jul 14 22:14:35.587696 env[1215]: time="2025-07-14T22:14:35.587626686Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 14 22:14:36.751668 env[1215]: time="2025-07-14T22:14:36.751619997Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:36.753526 env[1215]: time="2025-07-14T22:14:36.753492859Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:36.755257 env[1215]: time="2025-07-14T22:14:36.755230285Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:36.756674 env[1215]: time="2025-07-14T22:14:36.756637682Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:14:36.757249 env[1215]: time="2025-07-14T22:14:36.757215664Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c\"" Jul 14 22:14:36.762386 env[1215]: time="2025-07-14T22:14:36.762354825Z" level=info msg="CreateContainer within sandbox \"0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 14 22:14:36.773343 env[1215]: time="2025-07-14T22:14:36.772616948Z" level=info msg="CreateContainer within sandbox \"0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"cc61b5c815d00f3f19bd3245e4ce3318caa1fcc223681245790a56765bc74746\"" Jul 14 22:14:36.775429 env[1215]: time="2025-07-14T22:14:36.775392103Z" level=info msg="StartContainer for \"cc61b5c815d00f3f19bd3245e4ce3318caa1fcc223681245790a56765bc74746\"" Jul 14 22:14:36.796802 systemd[1]: Started cri-containerd-cc61b5c815d00f3f19bd3245e4ce3318caa1fcc223681245790a56765bc74746.scope. Jul 14 22:14:36.820000 audit[4944]: AVC avc: denied { perfmon } for pid=4944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.820000 audit[4944]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4606 pid=4944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:36.820000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363363162356338313564303066336631396264333234356534636533 Jul 14 22:14:36.820000 audit[4944]: AVC avc: denied { bpf } for pid=4944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.820000 audit[4944]: AVC avc: denied { bpf } for pid=4944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.820000 audit[4944]: AVC avc: denied { bpf } for pid=4944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.820000 audit[4944]: AVC avc: denied { perfmon } for pid=4944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.820000 audit[4944]: AVC avc: denied { perfmon } for pid=4944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.820000 audit[4944]: AVC avc: denied { perfmon } for pid=4944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.820000 audit[4944]: AVC avc: denied { perfmon } for pid=4944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.820000 audit[4944]: AVC avc: denied { perfmon } for pid=4944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.820000 audit[4944]: AVC avc: denied { bpf } for pid=4944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.820000 audit[4944]: AVC avc: denied { bpf } for pid=4944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.820000 audit: BPF prog-id=231 op=LOAD Jul 14 22:14:36.820000 audit[4944]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4606 pid=4944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:36.820000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363363162356338313564303066336631396264333234356534636533 Jul 14 22:14:36.820000 audit[4944]: AVC avc: denied { bpf } for pid=4944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.820000 audit[4944]: AVC avc: denied { bpf } for pid=4944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.820000 audit[4944]: AVC avc: denied { perfmon } for pid=4944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.820000 audit[4944]: AVC avc: denied { perfmon } for pid=4944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.820000 audit[4944]: AVC avc: denied { perfmon } for pid=4944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.820000 audit[4944]: AVC avc: denied { perfmon } for pid=4944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.820000 audit[4944]: AVC avc: denied { perfmon } for pid=4944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.820000 audit[4944]: AVC avc: denied { bpf } for pid=4944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.820000 audit[4944]: AVC avc: denied { bpf } for pid=4944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.820000 audit: BPF prog-id=232 op=LOAD Jul 14 22:14:36.820000 audit[4944]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4606 pid=4944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:36.820000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363363162356338313564303066336631396264333234356534636533 Jul 14 22:14:36.821000 audit: BPF prog-id=232 op=UNLOAD Jul 14 22:14:36.821000 audit: BPF prog-id=231 op=UNLOAD Jul 14 22:14:36.821000 audit[4944]: AVC avc: denied { bpf } for pid=4944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.821000 audit[4944]: AVC avc: denied { bpf } for pid=4944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.821000 audit[4944]: AVC avc: denied { bpf } for pid=4944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.821000 audit[4944]: AVC avc: denied { perfmon } for pid=4944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.821000 audit[4944]: AVC avc: denied { perfmon } for pid=4944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.821000 audit[4944]: AVC avc: denied { perfmon } for pid=4944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.821000 audit[4944]: AVC avc: denied { perfmon } for pid=4944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.821000 audit[4944]: AVC avc: denied { perfmon } for pid=4944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.821000 audit[4944]: AVC avc: denied { bpf } for pid=4944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.821000 audit[4944]: AVC avc: denied { bpf } for pid=4944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:14:36.821000 audit: BPF prog-id=233 op=LOAD Jul 14 22:14:36.821000 audit[4944]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4606 pid=4944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:36.821000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363363162356338313564303066336631396264333234356534636533 Jul 14 22:14:36.838979 env[1215]: time="2025-07-14T22:14:36.838931100Z" level=info msg="StartContainer for \"cc61b5c815d00f3f19bd3245e4ce3318caa1fcc223681245790a56765bc74746\" returns successfully" Jul 14 22:14:37.058932 kubelet[2006]: I0714 22:14:37.058643 2006 csi_plugin.go:106] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 14 22:14:37.058932 kubelet[2006]: I0714 22:14:37.058694 2006 csi_plugin.go:119] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 14 22:14:41.350000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:14:41.351758 kernel: kauditd_printk_skb: 82 callbacks suppressed Jul 14 22:14:41.351806 kernel: audit: type=1400 audit(1752531281.350:1451): avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:14:41.350000 audit[1883]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=75 a1=40081477a0 a2=fc6 a3=0 items=0 ppid=1735 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 key=(null) Jul 14 22:14:41.360376 kernel: audit: type=1300 audit(1752531281.350:1451): arch=c00000b7 syscall=27 success=no exit=-13 a0=75 a1=40081477a0 a2=fc6 a3=0 items=0 ppid=1735 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 key=(null) Jul 14 22:14:41.360456 kernel: audit: type=1327 audit(1752531281.350:1451): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:14:41.350000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:14:41.350000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:14:41.370202 kernel: audit: type=1400 audit(1752531281.350:1452): avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:14:41.370271 kernel: audit: type=1300 audit(1752531281.350:1452): arch=c00000b7 syscall=27 success=no exit=-13 a0=76 a1=4009ff00f0 a2=fc6 a3=0 items=0 ppid=1735 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 key=(null) Jul 14 22:14:41.350000 audit[1883]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=76 a1=4009ff00f0 a2=fc6 a3=0 items=0 ppid=1735 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 key=(null) Jul 14 22:14:41.350000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:14:41.380658 kernel: audit: type=1327 audit(1752531281.350:1452): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:14:41.380751 kernel: audit: type=1400 audit(1752531281.354:1453): avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:14:41.354000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:14:41.354000 audit[1883]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=75 a1=40062d2390 a2=fc6 a3=0 items=0 ppid=1735 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 key=(null) Jul 14 22:14:41.388146 kernel: audit: type=1300 audit(1752531281.354:1453): arch=c00000b7 syscall=27 success=no exit=-13 a0=75 a1=40062d2390 a2=fc6 a3=0 items=0 ppid=1735 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 key=(null) Jul 14 22:14:41.388223 kernel: audit: type=1327 audit(1752531281.354:1453): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:14:41.354000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:14:41.354000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:14:41.394943 kernel: audit: type=1400 audit(1752531281.354:1454): avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:14:41.354000 audit[1883]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=75 a1=4009ff0150 a2=fc6 a3=0 items=0 ppid=1735 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 key=(null) Jul 14 22:14:41.354000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:14:41.354000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:14:41.354000 audit[1883]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=75 a1=40041a0400 a2=fc6 a3=0 items=0 ppid=1735 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 key=(null) Jul 14 22:14:41.354000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:14:41.354000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:14:41.354000 audit[1883]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=75 a1=4009ff08a0 a2=fc6 a3=0 items=0 ppid=1735 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 key=(null) Jul 14 22:14:41.354000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:14:41.472000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:14:41.472000 audit[1881]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002aa1530 a2=fc6 a3=0 items=0 ppid=1708 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 key=(null) Jul 14 22:14:41.472000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:14:41.473000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:14:41.473000 audit[1881]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000fe1be0 a2=fc6 a3=0 items=0 ppid=1708 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 key=(null) Jul 14 22:14:41.473000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:14:43.797690 kubelet[2006]: I0714 22:14:43.797649 2006 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 22:14:43.824866 kubelet[2006]: I0714 22:14:43.824803 2006 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-5sk6s" podStartSLOduration=30.734327884 podStartE2EDuration="35.82478813s" podCreationTimestamp="2025-07-14 22:14:08 +0000 UTC" firstStartedPulling="2025-07-14 22:14:31.667893103 +0000 UTC m=+47.783066748" lastFinishedPulling="2025-07-14 22:14:36.758353349 +0000 UTC m=+52.873526994" observedRunningTime="2025-07-14 22:14:37.172681949 +0000 UTC m=+53.287855594" watchObservedRunningTime="2025-07-14 22:14:43.82478813 +0000 UTC m=+59.939961775" Jul 14 22:14:43.839000 audit[5005]: NETFILTER_CFG table=filter:122 family=2 entries=11 op=nft_register_rule pid=5005 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:43.839000 audit[5005]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffd99298e0 a2=0 a3=1 items=0 ppid=2113 pid=5005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:43.839000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:43.849000 audit[5005]: NETFILTER_CFG table=nat:123 family=2 entries=29 op=nft_register_chain pid=5005 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:14:43.849000 audit[5005]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffd99298e0 a2=0 a3=1 items=0 ppid=2113 pid=5005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:43.849000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:14:43.958234 env[1215]: time="2025-07-14T22:14:43.958195982Z" level=info msg="StopPodSandbox for \"06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61\"" Jul 14 22:14:44.043289 env[1215]: 2025-07-14 22:14:44.001 [WARNING][5016] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" WorkloadEndpoint="localhost-k8s-whisker--7967ff6466--rsxkv-eth0" Jul 14 22:14:44.043289 env[1215]: 2025-07-14 22:14:44.001 [INFO][5016] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" Jul 14 22:14:44.043289 env[1215]: 2025-07-14 22:14:44.001 [INFO][5016] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" iface="eth0" netns="" Jul 14 22:14:44.043289 env[1215]: 2025-07-14 22:14:44.001 [INFO][5016] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" Jul 14 22:14:44.043289 env[1215]: 2025-07-14 22:14:44.001 [INFO][5016] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" Jul 14 22:14:44.043289 env[1215]: 2025-07-14 22:14:44.027 [INFO][5027] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" HandleID="k8s-pod-network.06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" Workload="localhost-k8s-whisker--7967ff6466--rsxkv-eth0" Jul 14 22:14:44.043289 env[1215]: 2025-07-14 22:14:44.028 [INFO][5027] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:44.043289 env[1215]: 2025-07-14 22:14:44.028 [INFO][5027] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:44.043289 env[1215]: 2025-07-14 22:14:44.037 [WARNING][5027] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" HandleID="k8s-pod-network.06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" Workload="localhost-k8s-whisker--7967ff6466--rsxkv-eth0" Jul 14 22:14:44.043289 env[1215]: 2025-07-14 22:14:44.037 [INFO][5027] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" HandleID="k8s-pod-network.06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" Workload="localhost-k8s-whisker--7967ff6466--rsxkv-eth0" Jul 14 22:14:44.043289 env[1215]: 2025-07-14 22:14:44.038 [INFO][5027] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:44.043289 env[1215]: 2025-07-14 22:14:44.040 [INFO][5016] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" Jul 14 22:14:44.043690 env[1215]: time="2025-07-14T22:14:44.043322017Z" level=info msg="TearDown network for sandbox \"06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61\" successfully" Jul 14 22:14:44.043690 env[1215]: time="2025-07-14T22:14:44.043354057Z" level=info msg="StopPodSandbox for \"06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61\" returns successfully" Jul 14 22:14:44.044440 env[1215]: time="2025-07-14T22:14:44.044371328Z" level=info msg="RemovePodSandbox for \"06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61\"" Jul 14 22:14:44.044519 env[1215]: time="2025-07-14T22:14:44.044453167Z" level=info msg="Forcibly stopping sandbox \"06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61\"" Jul 14 22:14:44.119489 env[1215]: 2025-07-14 22:14:44.080 [WARNING][5044] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" WorkloadEndpoint="localhost-k8s-whisker--7967ff6466--rsxkv-eth0" Jul 14 22:14:44.119489 env[1215]: 2025-07-14 22:14:44.080 [INFO][5044] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" Jul 14 22:14:44.119489 env[1215]: 2025-07-14 22:14:44.080 [INFO][5044] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" iface="eth0" netns="" Jul 14 22:14:44.119489 env[1215]: 2025-07-14 22:14:44.080 [INFO][5044] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" Jul 14 22:14:44.119489 env[1215]: 2025-07-14 22:14:44.080 [INFO][5044] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" Jul 14 22:14:44.119489 env[1215]: 2025-07-14 22:14:44.104 [INFO][5052] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" HandleID="k8s-pod-network.06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" Workload="localhost-k8s-whisker--7967ff6466--rsxkv-eth0" Jul 14 22:14:44.119489 env[1215]: 2025-07-14 22:14:44.105 [INFO][5052] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:44.119489 env[1215]: 2025-07-14 22:14:44.105 [INFO][5052] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:44.119489 env[1215]: 2025-07-14 22:14:44.114 [WARNING][5052] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" HandleID="k8s-pod-network.06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" Workload="localhost-k8s-whisker--7967ff6466--rsxkv-eth0" Jul 14 22:14:44.119489 env[1215]: 2025-07-14 22:14:44.114 [INFO][5052] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" HandleID="k8s-pod-network.06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" Workload="localhost-k8s-whisker--7967ff6466--rsxkv-eth0" Jul 14 22:14:44.119489 env[1215]: 2025-07-14 22:14:44.115 [INFO][5052] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:44.119489 env[1215]: 2025-07-14 22:14:44.117 [INFO][5044] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61" Jul 14 22:14:44.123502 env[1215]: time="2025-07-14T22:14:44.119452518Z" level=info msg="TearDown network for sandbox \"06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61\" successfully" Jul 14 22:14:44.127097 env[1215]: time="2025-07-14T22:14:44.127028089Z" level=info msg="RemovePodSandbox \"06c841859a613f3b560434129e981c4f0c7134b499001d3c38e74c78aded3b61\" returns successfully" Jul 14 22:14:44.127622 env[1215]: time="2025-07-14T22:14:44.127586724Z" level=info msg="StopPodSandbox for \"e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31\"" Jul 14 22:14:44.209447 env[1215]: 2025-07-14 22:14:44.175 [WARNING][5071] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--74cfd4cbdb--6xqzx-eth0", GenerateName:"calico-apiserver-74cfd4cbdb-", Namespace:"calico-apiserver", SelfLink:"", UID:"1b6ea792-b855-4382-96d6-ba04817e00fd", ResourceVersion:"994", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 14, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"74cfd4cbdb", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d8f75969780479587fd6bea002c09656005b7fd9c8ae375761e6f2c574d77882", Pod:"calico-apiserver-74cfd4cbdb-6xqzx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia2bca902ab0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:44.209447 env[1215]: 2025-07-14 22:14:44.176 [INFO][5071] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" Jul 14 22:14:44.209447 env[1215]: 2025-07-14 22:14:44.176 [INFO][5071] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" iface="eth0" netns="" Jul 14 22:14:44.209447 env[1215]: 2025-07-14 22:14:44.176 [INFO][5071] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" Jul 14 22:14:44.209447 env[1215]: 2025-07-14 22:14:44.176 [INFO][5071] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" Jul 14 22:14:44.209447 env[1215]: 2025-07-14 22:14:44.194 [INFO][5081] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" HandleID="k8s-pod-network.e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" Workload="localhost-k8s-calico--apiserver--74cfd4cbdb--6xqzx-eth0" Jul 14 22:14:44.209447 env[1215]: 2025-07-14 22:14:44.195 [INFO][5081] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:44.209447 env[1215]: 2025-07-14 22:14:44.195 [INFO][5081] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:44.209447 env[1215]: 2025-07-14 22:14:44.205 [WARNING][5081] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" HandleID="k8s-pod-network.e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" Workload="localhost-k8s-calico--apiserver--74cfd4cbdb--6xqzx-eth0" Jul 14 22:14:44.209447 env[1215]: 2025-07-14 22:14:44.205 [INFO][5081] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" HandleID="k8s-pod-network.e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" Workload="localhost-k8s-calico--apiserver--74cfd4cbdb--6xqzx-eth0" Jul 14 22:14:44.209447 env[1215]: 2025-07-14 22:14:44.206 [INFO][5081] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:44.209447 env[1215]: 2025-07-14 22:14:44.207 [INFO][5071] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" Jul 14 22:14:44.210102 env[1215]: time="2025-07-14T22:14:44.209482531Z" level=info msg="TearDown network for sandbox \"e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31\" successfully" Jul 14 22:14:44.210102 env[1215]: time="2025-07-14T22:14:44.209515451Z" level=info msg="StopPodSandbox for \"e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31\" returns successfully" Jul 14 22:14:44.210102 env[1215]: time="2025-07-14T22:14:44.210039806Z" level=info msg="RemovePodSandbox for \"e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31\"" Jul 14 22:14:44.210102 env[1215]: time="2025-07-14T22:14:44.210073166Z" level=info msg="Forcibly stopping sandbox \"e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31\"" Jul 14 22:14:44.276468 env[1215]: 2025-07-14 22:14:44.243 [WARNING][5098] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--74cfd4cbdb--6xqzx-eth0", GenerateName:"calico-apiserver-74cfd4cbdb-", Namespace:"calico-apiserver", SelfLink:"", UID:"1b6ea792-b855-4382-96d6-ba04817e00fd", ResourceVersion:"994", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 14, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"74cfd4cbdb", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d8f75969780479587fd6bea002c09656005b7fd9c8ae375761e6f2c574d77882", Pod:"calico-apiserver-74cfd4cbdb-6xqzx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia2bca902ab0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:44.276468 env[1215]: 2025-07-14 22:14:44.243 [INFO][5098] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" Jul 14 22:14:44.276468 env[1215]: 2025-07-14 22:14:44.243 [INFO][5098] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" iface="eth0" netns="" Jul 14 22:14:44.276468 env[1215]: 2025-07-14 22:14:44.243 [INFO][5098] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" Jul 14 22:14:44.276468 env[1215]: 2025-07-14 22:14:44.243 [INFO][5098] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" Jul 14 22:14:44.276468 env[1215]: 2025-07-14 22:14:44.263 [INFO][5107] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" HandleID="k8s-pod-network.e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" Workload="localhost-k8s-calico--apiserver--74cfd4cbdb--6xqzx-eth0" Jul 14 22:14:44.276468 env[1215]: 2025-07-14 22:14:44.263 [INFO][5107] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:44.276468 env[1215]: 2025-07-14 22:14:44.263 [INFO][5107] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:44.276468 env[1215]: 2025-07-14 22:14:44.271 [WARNING][5107] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" HandleID="k8s-pod-network.e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" Workload="localhost-k8s-calico--apiserver--74cfd4cbdb--6xqzx-eth0" Jul 14 22:14:44.276468 env[1215]: 2025-07-14 22:14:44.271 [INFO][5107] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" HandleID="k8s-pod-network.e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" Workload="localhost-k8s-calico--apiserver--74cfd4cbdb--6xqzx-eth0" Jul 14 22:14:44.276468 env[1215]: 2025-07-14 22:14:44.273 [INFO][5107] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:44.276468 env[1215]: 2025-07-14 22:14:44.274 [INFO][5098] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31" Jul 14 22:14:44.277042 env[1215]: time="2025-07-14T22:14:44.276997631Z" level=info msg="TearDown network for sandbox \"e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31\" successfully" Jul 14 22:14:44.280803 env[1215]: time="2025-07-14T22:14:44.280765637Z" level=info msg="RemovePodSandbox \"e047ab1806063a85c3da6978c2b303f401046097a8fd8b8f38df37b5f717db31\" returns successfully" Jul 14 22:14:44.281486 env[1215]: time="2025-07-14T22:14:44.281453671Z" level=info msg="StopPodSandbox for \"41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2\"" Jul 14 22:14:44.347561 env[1215]: 2025-07-14 22:14:44.314 [WARNING][5124] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--9l5g9-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"f2152eb1-3ffc-418b-80cb-f2d468160f26", ResourceVersion:"962", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 13, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"12cdc9e35c3202a8b33321d788fe0ed9b0f3aec683377fedf065ae5e7226f827", Pod:"coredns-674b8bbfcf-9l5g9", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali131996a9cb5", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:44.347561 env[1215]: 2025-07-14 22:14:44.314 [INFO][5124] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" Jul 14 22:14:44.347561 env[1215]: 2025-07-14 22:14:44.314 [INFO][5124] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" iface="eth0" netns="" Jul 14 22:14:44.347561 env[1215]: 2025-07-14 22:14:44.314 [INFO][5124] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" Jul 14 22:14:44.347561 env[1215]: 2025-07-14 22:14:44.314 [INFO][5124] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" Jul 14 22:14:44.347561 env[1215]: 2025-07-14 22:14:44.332 [INFO][5133] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" HandleID="k8s-pod-network.41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" Workload="localhost-k8s-coredns--674b8bbfcf--9l5g9-eth0" Jul 14 22:14:44.347561 env[1215]: 2025-07-14 22:14:44.332 [INFO][5133] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:44.347561 env[1215]: 2025-07-14 22:14:44.332 [INFO][5133] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:44.347561 env[1215]: 2025-07-14 22:14:44.343 [WARNING][5133] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" HandleID="k8s-pod-network.41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" Workload="localhost-k8s-coredns--674b8bbfcf--9l5g9-eth0" Jul 14 22:14:44.347561 env[1215]: 2025-07-14 22:14:44.343 [INFO][5133] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" HandleID="k8s-pod-network.41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" Workload="localhost-k8s-coredns--674b8bbfcf--9l5g9-eth0" Jul 14 22:14:44.347561 env[1215]: 2025-07-14 22:14:44.344 [INFO][5133] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:44.347561 env[1215]: 2025-07-14 22:14:44.346 [INFO][5124] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" Jul 14 22:14:44.348199 env[1215]: time="2025-07-14T22:14:44.347752582Z" level=info msg="TearDown network for sandbox \"41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2\" successfully" Jul 14 22:14:44.348282 env[1215]: time="2025-07-14T22:14:44.348260657Z" level=info msg="StopPodSandbox for \"41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2\" returns successfully" Jul 14 22:14:44.348789 env[1215]: time="2025-07-14T22:14:44.348760052Z" level=info msg="RemovePodSandbox for \"41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2\"" Jul 14 22:14:44.348862 env[1215]: time="2025-07-14T22:14:44.348799372Z" level=info msg="Forcibly stopping sandbox \"41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2\"" Jul 14 22:14:44.415117 env[1215]: 2025-07-14 22:14:44.383 [WARNING][5151] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--9l5g9-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"f2152eb1-3ffc-418b-80cb-f2d468160f26", ResourceVersion:"962", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 13, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"12cdc9e35c3202a8b33321d788fe0ed9b0f3aec683377fedf065ae5e7226f827", Pod:"coredns-674b8bbfcf-9l5g9", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali131996a9cb5", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:44.415117 env[1215]: 2025-07-14 22:14:44.384 [INFO][5151] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" Jul 14 22:14:44.415117 env[1215]: 2025-07-14 22:14:44.384 [INFO][5151] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" iface="eth0" netns="" Jul 14 22:14:44.415117 env[1215]: 2025-07-14 22:14:44.384 [INFO][5151] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" Jul 14 22:14:44.415117 env[1215]: 2025-07-14 22:14:44.384 [INFO][5151] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" Jul 14 22:14:44.415117 env[1215]: 2025-07-14 22:14:44.402 [INFO][5160] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" HandleID="k8s-pod-network.41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" Workload="localhost-k8s-coredns--674b8bbfcf--9l5g9-eth0" Jul 14 22:14:44.415117 env[1215]: 2025-07-14 22:14:44.402 [INFO][5160] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:44.415117 env[1215]: 2025-07-14 22:14:44.402 [INFO][5160] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:44.415117 env[1215]: 2025-07-14 22:14:44.410 [WARNING][5160] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" HandleID="k8s-pod-network.41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" Workload="localhost-k8s-coredns--674b8bbfcf--9l5g9-eth0" Jul 14 22:14:44.415117 env[1215]: 2025-07-14 22:14:44.410 [INFO][5160] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" HandleID="k8s-pod-network.41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" Workload="localhost-k8s-coredns--674b8bbfcf--9l5g9-eth0" Jul 14 22:14:44.415117 env[1215]: 2025-07-14 22:14:44.412 [INFO][5160] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:44.415117 env[1215]: 2025-07-14 22:14:44.413 [INFO][5151] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2" Jul 14 22:14:44.415117 env[1215]: time="2025-07-14T22:14:44.415090803Z" level=info msg="TearDown network for sandbox \"41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2\" successfully" Jul 14 22:14:44.418342 env[1215]: time="2025-07-14T22:14:44.418297094Z" level=info msg="RemovePodSandbox \"41d01bb46d9b4597d3c684f06b16e6c0eab0ad38a41ecbd68b5ef30e5fde0ec2\" returns successfully" Jul 14 22:14:44.418893 env[1215]: time="2025-07-14T22:14:44.418857369Z" level=info msg="StopPodSandbox for \"b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0\"" Jul 14 22:14:44.485318 env[1215]: 2025-07-14 22:14:44.454 [WARNING][5177] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--74cfd4cbdb--f9z8h-eth0", GenerateName:"calico-apiserver-74cfd4cbdb-", Namespace:"calico-apiserver", SelfLink:"", UID:"a309be2c-e649-4b80-9723-4bb86fe0fdd0", ResourceVersion:"1091", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 14, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"74cfd4cbdb", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b3c61117323c8d0275fa98bc91a1dd96bf9a3fc9df12f2ed6650c1676b69e5b1", Pod:"calico-apiserver-74cfd4cbdb-f9z8h", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali62334d90820", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:44.485318 env[1215]: 2025-07-14 22:14:44.454 [INFO][5177] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" Jul 14 22:14:44.485318 env[1215]: 2025-07-14 22:14:44.454 [INFO][5177] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" iface="eth0" netns="" Jul 14 22:14:44.485318 env[1215]: 2025-07-14 22:14:44.454 [INFO][5177] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" Jul 14 22:14:44.485318 env[1215]: 2025-07-14 22:14:44.454 [INFO][5177] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" Jul 14 22:14:44.485318 env[1215]: 2025-07-14 22:14:44.472 [INFO][5186] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" HandleID="k8s-pod-network.b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" Workload="localhost-k8s-calico--apiserver--74cfd4cbdb--f9z8h-eth0" Jul 14 22:14:44.485318 env[1215]: 2025-07-14 22:14:44.472 [INFO][5186] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:44.485318 env[1215]: 2025-07-14 22:14:44.472 [INFO][5186] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:44.485318 env[1215]: 2025-07-14 22:14:44.480 [WARNING][5186] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" HandleID="k8s-pod-network.b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" Workload="localhost-k8s-calico--apiserver--74cfd4cbdb--f9z8h-eth0" Jul 14 22:14:44.485318 env[1215]: 2025-07-14 22:14:44.481 [INFO][5186] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" HandleID="k8s-pod-network.b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" Workload="localhost-k8s-calico--apiserver--74cfd4cbdb--f9z8h-eth0" Jul 14 22:14:44.485318 env[1215]: 2025-07-14 22:14:44.482 [INFO][5186] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:44.485318 env[1215]: 2025-07-14 22:14:44.483 [INFO][5177] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" Jul 14 22:14:44.485792 env[1215]: time="2025-07-14T22:14:44.485337958Z" level=info msg="TearDown network for sandbox \"b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0\" successfully" Jul 14 22:14:44.485792 env[1215]: time="2025-07-14T22:14:44.485368438Z" level=info msg="StopPodSandbox for \"b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0\" returns successfully" Jul 14 22:14:44.486270 env[1215]: time="2025-07-14T22:14:44.486230710Z" level=info msg="RemovePodSandbox for \"b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0\"" Jul 14 22:14:44.486323 env[1215]: time="2025-07-14T22:14:44.486269390Z" level=info msg="Forcibly stopping sandbox \"b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0\"" Jul 14 22:14:44.553383 env[1215]: 2025-07-14 22:14:44.520 [WARNING][5203] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--74cfd4cbdb--f9z8h-eth0", GenerateName:"calico-apiserver-74cfd4cbdb-", Namespace:"calico-apiserver", SelfLink:"", UID:"a309be2c-e649-4b80-9723-4bb86fe0fdd0", ResourceVersion:"1091", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 14, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"74cfd4cbdb", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b3c61117323c8d0275fa98bc91a1dd96bf9a3fc9df12f2ed6650c1676b69e5b1", Pod:"calico-apiserver-74cfd4cbdb-f9z8h", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali62334d90820", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:44.553383 env[1215]: 2025-07-14 22:14:44.520 [INFO][5203] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" Jul 14 22:14:44.553383 env[1215]: 2025-07-14 22:14:44.520 [INFO][5203] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" iface="eth0" netns="" Jul 14 22:14:44.553383 env[1215]: 2025-07-14 22:14:44.520 [INFO][5203] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" Jul 14 22:14:44.553383 env[1215]: 2025-07-14 22:14:44.520 [INFO][5203] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" Jul 14 22:14:44.553383 env[1215]: 2025-07-14 22:14:44.538 [INFO][5211] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" HandleID="k8s-pod-network.b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" Workload="localhost-k8s-calico--apiserver--74cfd4cbdb--f9z8h-eth0" Jul 14 22:14:44.553383 env[1215]: 2025-07-14 22:14:44.539 [INFO][5211] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:44.553383 env[1215]: 2025-07-14 22:14:44.539 [INFO][5211] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:44.553383 env[1215]: 2025-07-14 22:14:44.548 [WARNING][5211] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" HandleID="k8s-pod-network.b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" Workload="localhost-k8s-calico--apiserver--74cfd4cbdb--f9z8h-eth0" Jul 14 22:14:44.553383 env[1215]: 2025-07-14 22:14:44.548 [INFO][5211] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" HandleID="k8s-pod-network.b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" Workload="localhost-k8s-calico--apiserver--74cfd4cbdb--f9z8h-eth0" Jul 14 22:14:44.553383 env[1215]: 2025-07-14 22:14:44.550 [INFO][5211] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:44.553383 env[1215]: 2025-07-14 22:14:44.551 [INFO][5203] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0" Jul 14 22:14:44.553882 env[1215]: time="2025-07-14T22:14:44.553409173Z" level=info msg="TearDown network for sandbox \"b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0\" successfully" Jul 14 22:14:44.556381 env[1215]: time="2025-07-14T22:14:44.556339186Z" level=info msg="RemovePodSandbox \"b72273524126fb450604fe01fc65e541ca2844b36c424e51f7642c3e340cc9e0\" returns successfully" Jul 14 22:14:44.556857 env[1215]: time="2025-07-14T22:14:44.556825822Z" level=info msg="StopPodSandbox for \"d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6\"" Jul 14 22:14:44.621717 env[1215]: 2025-07-14 22:14:44.588 [WARNING][5229] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--5p6rx-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"315abcdd-d782-4be2-bcc4-f381a2f1b50e", ResourceVersion:"1037", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 13, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e05350c80c4505306cab841b42e8d69cb58452ada0d98001a68e998ea2f9a681", Pod:"coredns-674b8bbfcf-5p6rx", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali5d14c8a86b9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:44.621717 env[1215]: 2025-07-14 22:14:44.589 [INFO][5229] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" Jul 14 22:14:44.621717 env[1215]: 2025-07-14 22:14:44.589 [INFO][5229] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" iface="eth0" netns="" Jul 14 22:14:44.621717 env[1215]: 2025-07-14 22:14:44.589 [INFO][5229] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" Jul 14 22:14:44.621717 env[1215]: 2025-07-14 22:14:44.589 [INFO][5229] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" Jul 14 22:14:44.621717 env[1215]: 2025-07-14 22:14:44.607 [INFO][5237] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" HandleID="k8s-pod-network.d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" Workload="localhost-k8s-coredns--674b8bbfcf--5p6rx-eth0" Jul 14 22:14:44.621717 env[1215]: 2025-07-14 22:14:44.607 [INFO][5237] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:44.621717 env[1215]: 2025-07-14 22:14:44.608 [INFO][5237] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:44.621717 env[1215]: 2025-07-14 22:14:44.617 [WARNING][5237] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" HandleID="k8s-pod-network.d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" Workload="localhost-k8s-coredns--674b8bbfcf--5p6rx-eth0" Jul 14 22:14:44.621717 env[1215]: 2025-07-14 22:14:44.617 [INFO][5237] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" HandleID="k8s-pod-network.d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" Workload="localhost-k8s-coredns--674b8bbfcf--5p6rx-eth0" Jul 14 22:14:44.621717 env[1215]: 2025-07-14 22:14:44.618 [INFO][5237] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:44.621717 env[1215]: 2025-07-14 22:14:44.620 [INFO][5229] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" Jul 14 22:14:44.622155 env[1215]: time="2025-07-14T22:14:44.621760625Z" level=info msg="TearDown network for sandbox \"d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6\" successfully" Jul 14 22:14:44.622155 env[1215]: time="2025-07-14T22:14:44.621802825Z" level=info msg="StopPodSandbox for \"d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6\" returns successfully" Jul 14 22:14:44.622573 env[1215]: time="2025-07-14T22:14:44.622540538Z" level=info msg="RemovePodSandbox for \"d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6\"" Jul 14 22:14:44.622637 env[1215]: time="2025-07-14T22:14:44.622580978Z" level=info msg="Forcibly stopping sandbox \"d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6\"" Jul 14 22:14:44.687417 env[1215]: 2025-07-14 22:14:44.654 [WARNING][5256] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--5p6rx-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"315abcdd-d782-4be2-bcc4-f381a2f1b50e", ResourceVersion:"1037", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 13, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e05350c80c4505306cab841b42e8d69cb58452ada0d98001a68e998ea2f9a681", Pod:"coredns-674b8bbfcf-5p6rx", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali5d14c8a86b9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:44.687417 env[1215]: 2025-07-14 22:14:44.654 [INFO][5256] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" Jul 14 22:14:44.687417 env[1215]: 2025-07-14 22:14:44.654 [INFO][5256] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" iface="eth0" netns="" Jul 14 22:14:44.687417 env[1215]: 2025-07-14 22:14:44.654 [INFO][5256] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" Jul 14 22:14:44.687417 env[1215]: 2025-07-14 22:14:44.655 [INFO][5256] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" Jul 14 22:14:44.687417 env[1215]: 2025-07-14 22:14:44.673 [INFO][5265] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" HandleID="k8s-pod-network.d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" Workload="localhost-k8s-coredns--674b8bbfcf--5p6rx-eth0" Jul 14 22:14:44.687417 env[1215]: 2025-07-14 22:14:44.673 [INFO][5265] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:44.687417 env[1215]: 2025-07-14 22:14:44.673 [INFO][5265] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:44.687417 env[1215]: 2025-07-14 22:14:44.682 [WARNING][5265] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" HandleID="k8s-pod-network.d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" Workload="localhost-k8s-coredns--674b8bbfcf--5p6rx-eth0" Jul 14 22:14:44.687417 env[1215]: 2025-07-14 22:14:44.682 [INFO][5265] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" HandleID="k8s-pod-network.d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" Workload="localhost-k8s-coredns--674b8bbfcf--5p6rx-eth0" Jul 14 22:14:44.687417 env[1215]: 2025-07-14 22:14:44.684 [INFO][5265] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:44.687417 env[1215]: 2025-07-14 22:14:44.685 [INFO][5256] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6" Jul 14 22:14:44.687417 env[1215]: time="2025-07-14T22:14:44.687382863Z" level=info msg="TearDown network for sandbox \"d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6\" successfully" Jul 14 22:14:44.708624 env[1215]: time="2025-07-14T22:14:44.708570828Z" level=info msg="RemovePodSandbox \"d5f1dc85792a9b574da589fead57a0ddd7fb8a3b5f494d1946e3040c3c8106e6\" returns successfully" Jul 14 22:14:44.709160 env[1215]: time="2025-07-14T22:14:44.709127383Z" level=info msg="StopPodSandbox for \"bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30\"" Jul 14 22:14:44.775256 env[1215]: 2025-07-14 22:14:44.743 [WARNING][5283] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--cszg5-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"873b6b5c-5253-4b84-b586-5af9f7e09daa", ResourceVersion:"1058", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 14, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"417c2d2cd723071e4900f0de1314a4003b21d695d63a1a51a51754636487984f", Pod:"goldmane-768f4c5c69-cszg5", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali0146478b856", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:44.775256 env[1215]: 2025-07-14 22:14:44.743 [INFO][5283] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" Jul 14 22:14:44.775256 env[1215]: 2025-07-14 22:14:44.743 [INFO][5283] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" iface="eth0" netns="" Jul 14 22:14:44.775256 env[1215]: 2025-07-14 22:14:44.743 [INFO][5283] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" Jul 14 22:14:44.775256 env[1215]: 2025-07-14 22:14:44.743 [INFO][5283] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" Jul 14 22:14:44.775256 env[1215]: 2025-07-14 22:14:44.761 [INFO][5292] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" HandleID="k8s-pod-network.bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" Workload="localhost-k8s-goldmane--768f4c5c69--cszg5-eth0" Jul 14 22:14:44.775256 env[1215]: 2025-07-14 22:14:44.761 [INFO][5292] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:44.775256 env[1215]: 2025-07-14 22:14:44.761 [INFO][5292] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:44.775256 env[1215]: 2025-07-14 22:14:44.770 [WARNING][5292] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" HandleID="k8s-pod-network.bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" Workload="localhost-k8s-goldmane--768f4c5c69--cszg5-eth0" Jul 14 22:14:44.775256 env[1215]: 2025-07-14 22:14:44.770 [INFO][5292] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" HandleID="k8s-pod-network.bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" Workload="localhost-k8s-goldmane--768f4c5c69--cszg5-eth0" Jul 14 22:14:44.775256 env[1215]: 2025-07-14 22:14:44.771 [INFO][5292] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:44.775256 env[1215]: 2025-07-14 22:14:44.773 [INFO][5283] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" Jul 14 22:14:44.775677 env[1215]: time="2025-07-14T22:14:44.775274536Z" level=info msg="TearDown network for sandbox \"bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30\" successfully" Jul 14 22:14:44.775677 env[1215]: time="2025-07-14T22:14:44.775305655Z" level=info msg="StopPodSandbox for \"bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30\" returns successfully" Jul 14 22:14:44.777132 env[1215]: time="2025-07-14T22:14:44.777105039Z" level=info msg="RemovePodSandbox for \"bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30\"" Jul 14 22:14:44.777211 env[1215]: time="2025-07-14T22:14:44.777137719Z" level=info msg="Forcibly stopping sandbox \"bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30\"" Jul 14 22:14:44.844706 env[1215]: 2025-07-14 22:14:44.808 [WARNING][5311] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--cszg5-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"873b6b5c-5253-4b84-b586-5af9f7e09daa", ResourceVersion:"1058", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 14, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"417c2d2cd723071e4900f0de1314a4003b21d695d63a1a51a51754636487984f", Pod:"goldmane-768f4c5c69-cszg5", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali0146478b856", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:44.844706 env[1215]: 2025-07-14 22:14:44.809 [INFO][5311] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" Jul 14 22:14:44.844706 env[1215]: 2025-07-14 22:14:44.809 [INFO][5311] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" iface="eth0" netns="" Jul 14 22:14:44.844706 env[1215]: 2025-07-14 22:14:44.809 [INFO][5311] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" Jul 14 22:14:44.844706 env[1215]: 2025-07-14 22:14:44.809 [INFO][5311] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" Jul 14 22:14:44.844706 env[1215]: 2025-07-14 22:14:44.827 [INFO][5320] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" HandleID="k8s-pod-network.bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" Workload="localhost-k8s-goldmane--768f4c5c69--cszg5-eth0" Jul 14 22:14:44.844706 env[1215]: 2025-07-14 22:14:44.827 [INFO][5320] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:44.844706 env[1215]: 2025-07-14 22:14:44.827 [INFO][5320] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:44.844706 env[1215]: 2025-07-14 22:14:44.840 [WARNING][5320] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" HandleID="k8s-pod-network.bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" Workload="localhost-k8s-goldmane--768f4c5c69--cszg5-eth0" Jul 14 22:14:44.844706 env[1215]: 2025-07-14 22:14:44.840 [INFO][5320] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" HandleID="k8s-pod-network.bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" Workload="localhost-k8s-goldmane--768f4c5c69--cszg5-eth0" Jul 14 22:14:44.844706 env[1215]: 2025-07-14 22:14:44.841 [INFO][5320] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:44.844706 env[1215]: 2025-07-14 22:14:44.843 [INFO][5311] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30" Jul 14 22:14:44.845179 env[1215]: time="2025-07-14T22:14:44.844748138Z" level=info msg="TearDown network for sandbox \"bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30\" successfully" Jul 14 22:14:44.847484 env[1215]: time="2025-07-14T22:14:44.847391833Z" level=info msg="RemovePodSandbox \"bb8c7e97414c52eeed758df326ab5c4ad7537ce1e0519aefa9670a06ceb33e30\" returns successfully" Jul 14 22:14:44.848135 env[1215]: time="2025-07-14T22:14:44.848109107Z" level=info msg="StopPodSandbox for \"b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff\"" Jul 14 22:14:44.931442 env[1215]: 2025-07-14 22:14:44.893 [WARNING][5348] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--88b4685f--k9zr5-eth0", GenerateName:"calico-kube-controllers-88b4685f-", Namespace:"calico-system", SelfLink:"", UID:"bb8a40bd-e0ea-46bb-aab7-968e8d6511da", ResourceVersion:"1043", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 14, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"88b4685f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9b9397e94452efcff7cd71432100cafe81126d23bfb6814017d4ec5c9a865bec", Pod:"calico-kube-controllers-88b4685f-k9zr5", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calic186b148933", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:44.931442 env[1215]: 2025-07-14 22:14:44.893 [INFO][5348] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" Jul 14 22:14:44.931442 env[1215]: 2025-07-14 22:14:44.893 [INFO][5348] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" iface="eth0" netns="" Jul 14 22:14:44.931442 env[1215]: 2025-07-14 22:14:44.893 [INFO][5348] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" Jul 14 22:14:44.931442 env[1215]: 2025-07-14 22:14:44.893 [INFO][5348] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" Jul 14 22:14:44.931442 env[1215]: 2025-07-14 22:14:44.916 [INFO][5369] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" HandleID="k8s-pod-network.b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" Workload="localhost-k8s-calico--kube--controllers--88b4685f--k9zr5-eth0" Jul 14 22:14:44.931442 env[1215]: 2025-07-14 22:14:44.916 [INFO][5369] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:44.931442 env[1215]: 2025-07-14 22:14:44.916 [INFO][5369] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:44.931442 env[1215]: 2025-07-14 22:14:44.926 [WARNING][5369] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" HandleID="k8s-pod-network.b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" Workload="localhost-k8s-calico--kube--controllers--88b4685f--k9zr5-eth0" Jul 14 22:14:44.931442 env[1215]: 2025-07-14 22:14:44.926 [INFO][5369] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" HandleID="k8s-pod-network.b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" Workload="localhost-k8s-calico--kube--controllers--88b4685f--k9zr5-eth0" Jul 14 22:14:44.931442 env[1215]: 2025-07-14 22:14:44.928 [INFO][5369] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:44.931442 env[1215]: 2025-07-14 22:14:44.930 [INFO][5348] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" Jul 14 22:14:44.932064 env[1215]: time="2025-07-14T22:14:44.932031616Z" level=info msg="TearDown network for sandbox \"b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff\" successfully" Jul 14 22:14:44.932135 env[1215]: time="2025-07-14T22:14:44.932118175Z" level=info msg="StopPodSandbox for \"b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff\" returns successfully" Jul 14 22:14:44.932655 env[1215]: time="2025-07-14T22:14:44.932615211Z" level=info msg="RemovePodSandbox for \"b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff\"" Jul 14 22:14:44.932749 env[1215]: time="2025-07-14T22:14:44.932657850Z" level=info msg="Forcibly stopping sandbox \"b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff\"" Jul 14 22:14:44.998647 env[1215]: 2025-07-14 22:14:44.964 [WARNING][5388] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--88b4685f--k9zr5-eth0", GenerateName:"calico-kube-controllers-88b4685f-", Namespace:"calico-system", SelfLink:"", UID:"bb8a40bd-e0ea-46bb-aab7-968e8d6511da", ResourceVersion:"1043", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 14, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"88b4685f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9b9397e94452efcff7cd71432100cafe81126d23bfb6814017d4ec5c9a865bec", Pod:"calico-kube-controllers-88b4685f-k9zr5", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calic186b148933", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:44.998647 env[1215]: 2025-07-14 22:14:44.964 [INFO][5388] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" Jul 14 22:14:44.998647 env[1215]: 2025-07-14 22:14:44.964 [INFO][5388] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" iface="eth0" netns="" Jul 14 22:14:44.998647 env[1215]: 2025-07-14 22:14:44.964 [INFO][5388] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" Jul 14 22:14:44.998647 env[1215]: 2025-07-14 22:14:44.964 [INFO][5388] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" Jul 14 22:14:44.998647 env[1215]: 2025-07-14 22:14:44.985 [INFO][5397] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" HandleID="k8s-pod-network.b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" Workload="localhost-k8s-calico--kube--controllers--88b4685f--k9zr5-eth0" Jul 14 22:14:44.998647 env[1215]: 2025-07-14 22:14:44.985 [INFO][5397] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:44.998647 env[1215]: 2025-07-14 22:14:44.985 [INFO][5397] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:44.998647 env[1215]: 2025-07-14 22:14:44.993 [WARNING][5397] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" HandleID="k8s-pod-network.b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" Workload="localhost-k8s-calico--kube--controllers--88b4685f--k9zr5-eth0" Jul 14 22:14:44.998647 env[1215]: 2025-07-14 22:14:44.993 [INFO][5397] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" HandleID="k8s-pod-network.b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" Workload="localhost-k8s-calico--kube--controllers--88b4685f--k9zr5-eth0" Jul 14 22:14:44.998647 env[1215]: 2025-07-14 22:14:44.995 [INFO][5397] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:44.998647 env[1215]: 2025-07-14 22:14:44.997 [INFO][5388] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff" Jul 14 22:14:45.000286 env[1215]: time="2025-07-14T22:14:44.998684484Z" level=info msg="TearDown network for sandbox \"b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff\" successfully" Jul 14 22:14:45.002177 env[1215]: time="2025-07-14T22:14:45.002125216Z" level=info msg="RemovePodSandbox \"b308d5a883aa19b6248a09c64cf0584796b0e218316746538c25848cff6d15ff\" returns successfully" Jul 14 22:14:45.002710 env[1215]: time="2025-07-14T22:14:45.002671332Z" level=info msg="StopPodSandbox for \"0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199\"" Jul 14 22:14:45.067056 env[1215]: 2025-07-14 22:14:45.035 [WARNING][5414] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--5sk6s-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"75f4d0f5-72b9-47b9-a4f2-494a583825cc", ResourceVersion:"1075", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 14, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42", Pod:"csi-node-driver-5sk6s", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali118a6b14888", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:45.067056 env[1215]: 2025-07-14 22:14:45.035 [INFO][5414] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" Jul 14 22:14:45.067056 env[1215]: 2025-07-14 22:14:45.035 [INFO][5414] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" iface="eth0" netns="" Jul 14 22:14:45.067056 env[1215]: 2025-07-14 22:14:45.035 [INFO][5414] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" Jul 14 22:14:45.067056 env[1215]: 2025-07-14 22:14:45.035 [INFO][5414] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" Jul 14 22:14:45.067056 env[1215]: 2025-07-14 22:14:45.053 [INFO][5425] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" HandleID="k8s-pod-network.0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" Workload="localhost-k8s-csi--node--driver--5sk6s-eth0" Jul 14 22:14:45.067056 env[1215]: 2025-07-14 22:14:45.053 [INFO][5425] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:45.067056 env[1215]: 2025-07-14 22:14:45.053 [INFO][5425] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:45.067056 env[1215]: 2025-07-14 22:14:45.062 [WARNING][5425] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" HandleID="k8s-pod-network.0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" Workload="localhost-k8s-csi--node--driver--5sk6s-eth0" Jul 14 22:14:45.067056 env[1215]: 2025-07-14 22:14:45.062 [INFO][5425] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" HandleID="k8s-pod-network.0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" Workload="localhost-k8s-csi--node--driver--5sk6s-eth0" Jul 14 22:14:45.067056 env[1215]: 2025-07-14 22:14:45.063 [INFO][5425] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:45.067056 env[1215]: 2025-07-14 22:14:45.065 [INFO][5414] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" Jul 14 22:14:45.067613 env[1215]: time="2025-07-14T22:14:45.067577808Z" level=info msg="TearDown network for sandbox \"0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199\" successfully" Jul 14 22:14:45.067682 env[1215]: time="2025-07-14T22:14:45.067664888Z" level=info msg="StopPodSandbox for \"0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199\" returns successfully" Jul 14 22:14:45.068257 env[1215]: time="2025-07-14T22:14:45.068225884Z" level=info msg="RemovePodSandbox for \"0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199\"" Jul 14 22:14:45.068320 env[1215]: time="2025-07-14T22:14:45.068264284Z" level=info msg="Forcibly stopping sandbox \"0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199\"" Jul 14 22:14:45.141719 env[1215]: 2025-07-14 22:14:45.108 [WARNING][5443] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--5sk6s-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"75f4d0f5-72b9-47b9-a4f2-494a583825cc", ResourceVersion:"1075", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 14, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0a7b1fca396ff60ff8b97a4bc1985bebf9837351631a41f894f390b5beb6ae42", Pod:"csi-node-driver-5sk6s", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali118a6b14888", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:14:45.141719 env[1215]: 2025-07-14 22:14:45.108 [INFO][5443] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" Jul 14 22:14:45.141719 env[1215]: 2025-07-14 22:14:45.108 [INFO][5443] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" iface="eth0" netns="" Jul 14 22:14:45.141719 env[1215]: 2025-07-14 22:14:45.108 [INFO][5443] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" Jul 14 22:14:45.141719 env[1215]: 2025-07-14 22:14:45.108 [INFO][5443] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" Jul 14 22:14:45.141719 env[1215]: 2025-07-14 22:14:45.127 [INFO][5452] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" HandleID="k8s-pod-network.0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" Workload="localhost-k8s-csi--node--driver--5sk6s-eth0" Jul 14 22:14:45.141719 env[1215]: 2025-07-14 22:14:45.127 [INFO][5452] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:14:45.141719 env[1215]: 2025-07-14 22:14:45.127 [INFO][5452] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:14:45.141719 env[1215]: 2025-07-14 22:14:45.137 [WARNING][5452] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" HandleID="k8s-pod-network.0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" Workload="localhost-k8s-csi--node--driver--5sk6s-eth0" Jul 14 22:14:45.141719 env[1215]: 2025-07-14 22:14:45.137 [INFO][5452] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" HandleID="k8s-pod-network.0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" Workload="localhost-k8s-csi--node--driver--5sk6s-eth0" Jul 14 22:14:45.141719 env[1215]: 2025-07-14 22:14:45.138 [INFO][5452] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:14:45.141719 env[1215]: 2025-07-14 22:14:45.140 [INFO][5443] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199" Jul 14 22:14:45.142228 env[1215]: time="2025-07-14T22:14:45.142193578Z" level=info msg="TearDown network for sandbox \"0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199\" successfully" Jul 14 22:14:45.144994 env[1215]: time="2025-07-14T22:14:45.144961039Z" level=info msg="RemovePodSandbox \"0a02ead0e37a2860e23aea75bdde42b853a29bf7fb4538bc164c59a0e4c52199\" returns successfully" Jul 14 22:14:46.319000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:14:46.319000 audit[1881]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001e26800 a2=fc6 a3=0 items=0 ppid=1708 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 key=(null) Jul 14 22:14:46.319000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:14:46.321000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:14:46.321000 audit[1881]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400182e6e0 a2=fc6 a3=0 items=0 ppid=1708 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 key=(null) Jul 14 22:14:46.321000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:14:46.321000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:14:46.321000 audit[1881]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001e26820 a2=fc6 a3=0 items=0 ppid=1708 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 key=(null) Jul 14 22:14:46.321000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:14:46.321000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:14:46.321000 audit[1881]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a02080 a2=fc6 a3=0 items=0 ppid=1708 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 key=(null) Jul 14 22:14:46.321000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:14:54.752470 systemd[1]: run-containerd-runc-k8s.io-b7eb47cdf4bcc1f3a625624aee2dc2ee413efba6e1da2daa8131b9a4619bdabf-runc.RiTTwO.mount: Deactivated successfully. Jul 14 22:14:56.243537 systemd[1]: Started sshd@7-10.0.0.132:22-10.0.0.1:54638.service. Jul 14 22:14:56.242000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.132:22-10.0.0.1:54638 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:14:56.244423 kernel: kauditd_printk_skb: 32 callbacks suppressed Jul 14 22:14:56.244483 kernel: audit: type=1130 audit(1752531296.242:1465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.132:22-10.0.0.1:54638 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:14:56.284000 audit[5495]: USER_ACCT pid=5495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:14:56.285556 sshd[5495]: Accepted publickey for core from 10.0.0.1 port 54638 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:14:56.286971 sshd[5495]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:14:56.285000 audit[5495]: CRED_ACQ pid=5495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:14:56.290829 systemd-logind[1204]: New session 8 of user core. Jul 14 22:14:56.291603 kernel: audit: type=1101 audit(1752531296.284:1466): pid=5495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:14:56.291632 kernel: audit: type=1103 audit(1752531296.285:1467): pid=5495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:14:56.291652 kernel: audit: type=1006 audit(1752531296.285:1468): pid=5495 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Jul 14 22:14:56.291259 systemd[1]: Started session-8.scope. Jul 14 22:14:56.285000 audit[5495]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd1ece150 a2=3 a3=1 items=0 ppid=1 pid=5495 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:56.296249 kernel: audit: type=1300 audit(1752531296.285:1468): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd1ece150 a2=3 a3=1 items=0 ppid=1 pid=5495 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:14:56.296330 kernel: audit: type=1327 audit(1752531296.285:1468): proctitle=737368643A20636F7265205B707269765D Jul 14 22:14:56.285000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:14:56.295000 audit[5495]: USER_START pid=5495 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:14:56.300629 kernel: audit: type=1105 audit(1752531296.295:1469): pid=5495 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:14:56.300688 kernel: audit: type=1103 audit(1752531296.296:1470): pid=5497 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:14:56.296000 audit[5497]: CRED_ACQ pid=5497 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:14:56.626880 sshd[5495]: pam_unix(sshd:session): session closed for user core Jul 14 22:14:56.628000 audit[5495]: USER_END pid=5495 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:14:56.630329 systemd[1]: sshd@7-10.0.0.132:22-10.0.0.1:54638.service: Deactivated successfully. Jul 14 22:14:56.631168 systemd[1]: session-8.scope: Deactivated successfully. Jul 14 22:14:56.631713 systemd-logind[1204]: Session 8 logged out. Waiting for processes to exit. Jul 14 22:14:56.628000 audit[5495]: CRED_DISP pid=5495 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:14:56.632433 systemd-logind[1204]: Removed session 8. Jul 14 22:14:56.635105 kernel: audit: type=1106 audit(1752531296.628:1471): pid=5495 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:14:56.635341 kernel: audit: type=1104 audit(1752531296.628:1472): pid=5495 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:14:56.628000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.132:22-10.0.0.1:54638 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:14:56.980570 kubelet[2006]: E0714 22:14:56.980464 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:15:01.632168 systemd[1]: Started sshd@8-10.0.0.132:22-10.0.0.1:54646.service. Jul 14 22:15:01.633773 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 14 22:15:01.633852 kernel: audit: type=1130 audit(1752531301.631:1474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.132:22-10.0.0.1:54646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:01.631000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.132:22-10.0.0.1:54646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:01.671000 audit[5533]: USER_ACCT pid=5533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:01.672978 sshd[5533]: Accepted publickey for core from 10.0.0.1 port 54646 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:15:01.674288 sshd[5533]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:15:01.673000 audit[5533]: CRED_ACQ pid=5533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:01.678467 systemd-logind[1204]: New session 9 of user core. Jul 14 22:15:01.679232 kernel: audit: type=1101 audit(1752531301.671:1475): pid=5533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:01.679281 kernel: audit: type=1103 audit(1752531301.673:1476): pid=5533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:01.679025 systemd[1]: Started session-9.scope. Jul 14 22:15:01.681234 kernel: audit: type=1006 audit(1752531301.673:1477): pid=5533 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Jul 14 22:15:01.681300 kernel: audit: type=1300 audit(1752531301.673:1477): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc0b291c0 a2=3 a3=1 items=0 ppid=1 pid=5533 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:15:01.673000 audit[5533]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc0b291c0 a2=3 a3=1 items=0 ppid=1 pid=5533 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:15:01.684998 kernel: audit: type=1327 audit(1752531301.673:1477): proctitle=737368643A20636F7265205B707269765D Jul 14 22:15:01.673000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:15:01.684000 audit[5533]: USER_START pid=5533 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:01.689620 kernel: audit: type=1105 audit(1752531301.684:1478): pid=5533 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:01.689706 kernel: audit: type=1103 audit(1752531301.685:1479): pid=5535 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:01.685000 audit[5535]: CRED_ACQ pid=5535 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:01.814194 sshd[5533]: pam_unix(sshd:session): session closed for user core Jul 14 22:15:01.815000 audit[5533]: USER_END pid=5533 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:01.817528 systemd[1]: sshd@8-10.0.0.132:22-10.0.0.1:54646.service: Deactivated successfully. Jul 14 22:15:01.818364 systemd[1]: session-9.scope: Deactivated successfully. Jul 14 22:15:01.818902 systemd-logind[1204]: Session 9 logged out. Waiting for processes to exit. Jul 14 22:15:01.819652 systemd-logind[1204]: Removed session 9. Jul 14 22:15:01.815000 audit[5533]: CRED_DISP pid=5533 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:01.822658 kernel: audit: type=1106 audit(1752531301.815:1480): pid=5533 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:01.822742 kernel: audit: type=1104 audit(1752531301.815:1481): pid=5533 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:01.815000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.132:22-10.0.0.1:54646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:02.149067 systemd[1]: run-containerd-runc-k8s.io-b7eb47cdf4bcc1f3a625624aee2dc2ee413efba6e1da2daa8131b9a4619bdabf-runc.8mvVhA.mount: Deactivated successfully. Jul 14 22:15:06.819190 systemd[1]: Started sshd@9-10.0.0.132:22-10.0.0.1:51560.service. Jul 14 22:15:06.817000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.132:22-10.0.0.1:51560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:06.820324 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 14 22:15:06.820389 kernel: audit: type=1130 audit(1752531306.817:1483): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.132:22-10.0.0.1:51560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:06.858000 audit[5567]: USER_ACCT pid=5567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:06.860530 sshd[5567]: Accepted publickey for core from 10.0.0.1 port 51560 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:15:06.862000 audit[5567]: CRED_ACQ pid=5567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:06.864491 sshd[5567]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:15:06.867176 kernel: audit: type=1101 audit(1752531306.858:1484): pid=5567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:06.867234 kernel: audit: type=1103 audit(1752531306.862:1485): pid=5567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:06.867259 kernel: audit: type=1006 audit(1752531306.862:1486): pid=5567 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Jul 14 22:15:06.862000 audit[5567]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff013e8f0 a2=3 a3=1 items=0 ppid=1 pid=5567 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:15:06.869868 systemd-logind[1204]: New session 10 of user core. Jul 14 22:15:06.870655 systemd[1]: Started session-10.scope. Jul 14 22:15:06.872244 kernel: audit: type=1300 audit(1752531306.862:1486): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff013e8f0 a2=3 a3=1 items=0 ppid=1 pid=5567 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:15:06.862000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:15:06.873446 kernel: audit: type=1327 audit(1752531306.862:1486): proctitle=737368643A20636F7265205B707269765D Jul 14 22:15:06.872000 audit[5567]: USER_START pid=5567 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:06.873000 audit[5569]: CRED_ACQ pid=5569 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:06.880637 kernel: audit: type=1105 audit(1752531306.872:1487): pid=5567 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:06.880685 kernel: audit: type=1103 audit(1752531306.873:1488): pid=5569 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:06.994393 sshd[5567]: pam_unix(sshd:session): session closed for user core Jul 14 22:15:06.993000 audit[5567]: USER_END pid=5567 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:06.996714 systemd[1]: session-10.scope: Deactivated successfully. Jul 14 22:15:06.997259 systemd-logind[1204]: Session 10 logged out. Waiting for processes to exit. Jul 14 22:15:06.997391 systemd[1]: sshd@9-10.0.0.132:22-10.0.0.1:51560.service: Deactivated successfully. Jul 14 22:15:06.998336 systemd-logind[1204]: Removed session 10. Jul 14 22:15:06.993000 audit[5567]: CRED_DISP pid=5567 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:07.002234 kernel: audit: type=1106 audit(1752531306.993:1489): pid=5567 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:07.002327 kernel: audit: type=1104 audit(1752531306.993:1490): pid=5567 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:06.995000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.132:22-10.0.0.1:51560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:07.244000 audit[5604]: NETFILTER_CFG table=filter:124 family=2 entries=9 op=nft_register_rule pid=5604 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:15:07.244000 audit[5604]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=fffff9faf5e0 a2=0 a3=1 items=0 ppid=2113 pid=5604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:15:07.244000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:15:07.250000 audit[5604]: NETFILTER_CFG table=nat:125 family=2 entries=31 op=nft_register_chain pid=5604 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:15:07.250000 audit[5604]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=fffff9faf5e0 a2=0 a3=1 items=0 ppid=2113 pid=5604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:15:07.250000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:15:11.999249 systemd[1]: Started sshd@10-10.0.0.132:22-10.0.0.1:51568.service. Jul 14 22:15:11.997000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.132:22-10.0.0.1:51568 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:12.000827 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 14 22:15:12.000917 kernel: audit: type=1130 audit(1752531311.997:1494): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.132:22-10.0.0.1:51568 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:12.038000 audit[5614]: USER_ACCT pid=5614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:12.040490 sshd[5614]: Accepted publickey for core from 10.0.0.1 port 51568 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:15:12.041614 sshd[5614]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:15:12.043779 kernel: audit: type=1101 audit(1752531312.038:1495): pid=5614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:12.043857 kernel: audit: type=1103 audit(1752531312.039:1496): pid=5614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:12.039000 audit[5614]: CRED_ACQ pid=5614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:12.049342 kernel: audit: type=1006 audit(1752531312.039:1497): pid=5614 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Jul 14 22:15:12.039000 audit[5614]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd5487af0 a2=3 a3=1 items=0 ppid=1 pid=5614 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:15:12.049781 kernel: audit: type=1300 audit(1752531312.039:1497): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd5487af0 a2=3 a3=1 items=0 ppid=1 pid=5614 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:15:12.039000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:15:12.054528 kernel: audit: type=1327 audit(1752531312.039:1497): proctitle=737368643A20636F7265205B707269765D Jul 14 22:15:12.058024 systemd-logind[1204]: New session 11 of user core. Jul 14 22:15:12.058915 systemd[1]: Started session-11.scope. Jul 14 22:15:12.061000 audit[5614]: USER_START pid=5614 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:12.065000 audit[5616]: CRED_ACQ pid=5616 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:12.070116 kernel: audit: type=1105 audit(1752531312.061:1498): pid=5614 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:12.070195 kernel: audit: type=1103 audit(1752531312.065:1499): pid=5616 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:12.243359 sshd[5614]: pam_unix(sshd:session): session closed for user core Jul 14 22:15:12.242000 audit[5614]: USER_END pid=5614 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:12.245904 systemd[1]: sshd@10-10.0.0.132:22-10.0.0.1:51568.service: Deactivated successfully. Jul 14 22:15:12.246684 systemd[1]: session-11.scope: Deactivated successfully. Jul 14 22:15:12.242000 audit[5614]: CRED_DISP pid=5614 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:12.249359 systemd-logind[1204]: Session 11 logged out. Waiting for processes to exit. Jul 14 22:15:12.250369 systemd-logind[1204]: Removed session 11. Jul 14 22:15:12.250754 kernel: audit: type=1106 audit(1752531312.242:1500): pid=5614 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:12.250947 kernel: audit: type=1104 audit(1752531312.242:1501): pid=5614 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:12.242000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.132:22-10.0.0.1:51568 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:14.140678 kubelet[2006]: I0714 22:15:14.140637 2006 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 22:15:14.186000 audit[5628]: NETFILTER_CFG table=filter:126 family=2 entries=8 op=nft_register_rule pid=5628 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:15:14.186000 audit[5628]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffcab4a520 a2=0 a3=1 items=0 ppid=2113 pid=5628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:15:14.186000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:15:14.195000 audit[5628]: NETFILTER_CFG table=nat:127 family=2 entries=38 op=nft_register_chain pid=5628 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:15:14.195000 audit[5628]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12772 a0=3 a1=ffffcab4a520 a2=0 a3=1 items=0 ppid=2113 pid=5628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:15:14.195000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:15:14.980877 kubelet[2006]: E0714 22:15:14.980837 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:15:17.248886 systemd[1]: Started sshd@11-10.0.0.132:22-10.0.0.1:42456.service. Jul 14 22:15:17.248000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.132:22-10.0.0.1:42456 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:17.250342 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 14 22:15:17.250400 kernel: audit: type=1130 audit(1752531317.248:1505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.132:22-10.0.0.1:42456 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:17.282000 audit[5630]: USER_ACCT pid=5630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:17.283456 sshd[5630]: Accepted publickey for core from 10.0.0.1 port 42456 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:15:17.284999 sshd[5630]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:15:17.283000 audit[5630]: CRED_ACQ pid=5630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:17.289337 kernel: audit: type=1101 audit(1752531317.282:1506): pid=5630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:17.289403 kernel: audit: type=1103 audit(1752531317.283:1507): pid=5630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:17.289429 kernel: audit: type=1006 audit(1752531317.283:1508): pid=5630 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Jul 14 22:15:17.291247 kernel: audit: type=1300 audit(1752531317.283:1508): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffebebe050 a2=3 a3=1 items=0 ppid=1 pid=5630 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:15:17.283000 audit[5630]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffebebe050 a2=3 a3=1 items=0 ppid=1 pid=5630 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:15:17.293215 systemd-logind[1204]: New session 12 of user core. Jul 14 22:15:17.293638 systemd[1]: Started session-12.scope. Jul 14 22:15:17.283000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:15:17.295714 kernel: audit: type=1327 audit(1752531317.283:1508): proctitle=737368643A20636F7265205B707269765D Jul 14 22:15:17.297000 audit[5630]: USER_START pid=5630 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:17.299000 audit[5632]: CRED_ACQ pid=5632 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:17.305121 kernel: audit: type=1105 audit(1752531317.297:1509): pid=5630 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:17.305202 kernel: audit: type=1103 audit(1752531317.299:1510): pid=5632 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:17.424811 sshd[5630]: pam_unix(sshd:session): session closed for user core Jul 14 22:15:17.426000 audit[5630]: USER_END pid=5630 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:17.426000 audit[5630]: CRED_DISP pid=5630 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:17.431312 systemd[1]: Started sshd@12-10.0.0.132:22-10.0.0.1:42472.service. Jul 14 22:15:17.431868 systemd[1]: sshd@11-10.0.0.132:22-10.0.0.1:42456.service: Deactivated successfully. Jul 14 22:15:17.432897 systemd[1]: session-12.scope: Deactivated successfully. Jul 14 22:15:17.434116 kernel: audit: type=1106 audit(1752531317.426:1511): pid=5630 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:17.434200 kernel: audit: type=1104 audit(1752531317.426:1512): pid=5630 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:17.430000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.132:22-10.0.0.1:42472 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:17.430000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.132:22-10.0.0.1:42456 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:17.433790 systemd-logind[1204]: Session 12 logged out. Waiting for processes to exit. Jul 14 22:15:17.435384 systemd-logind[1204]: Removed session 12. Jul 14 22:15:17.472000 audit[5643]: USER_ACCT pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:17.473091 sshd[5643]: Accepted publickey for core from 10.0.0.1 port 42472 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:15:17.473000 audit[5643]: CRED_ACQ pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:17.474000 audit[5643]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd65aa430 a2=3 a3=1 items=0 ppid=1 pid=5643 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:15:17.474000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:15:17.475101 sshd[5643]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:15:17.479143 systemd-logind[1204]: New session 13 of user core. Jul 14 22:15:17.479716 systemd[1]: Started session-13.scope. Jul 14 22:15:17.483000 audit[5643]: USER_START pid=5643 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:17.485000 audit[5646]: CRED_ACQ pid=5646 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:17.637568 sshd[5643]: pam_unix(sshd:session): session closed for user core Jul 14 22:15:17.637000 audit[5643]: USER_END pid=5643 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:17.638000 audit[5643]: CRED_DISP pid=5643 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:17.642000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.132:22-10.0.0.1:42472 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:17.643166 systemd[1]: sshd@12-10.0.0.132:22-10.0.0.1:42472.service: Deactivated successfully. Jul 14 22:15:17.643916 systemd[1]: session-13.scope: Deactivated successfully. Jul 14 22:15:17.645960 systemd[1]: Started sshd@13-10.0.0.132:22-10.0.0.1:42484.service. Jul 14 22:15:17.645000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.132:22-10.0.0.1:42484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:17.652007 systemd-logind[1204]: Session 13 logged out. Waiting for processes to exit. Jul 14 22:15:17.657235 systemd-logind[1204]: Removed session 13. Jul 14 22:15:17.684000 audit[5655]: USER_ACCT pid=5655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:17.685589 sshd[5655]: Accepted publickey for core from 10.0.0.1 port 42484 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:15:17.686000 audit[5655]: CRED_ACQ pid=5655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:17.686000 audit[5655]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd523e4c0 a2=3 a3=1 items=0 ppid=1 pid=5655 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:15:17.686000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:15:17.687179 sshd[5655]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:15:17.690515 systemd-logind[1204]: New session 14 of user core. Jul 14 22:15:17.691368 systemd[1]: Started session-14.scope. Jul 14 22:15:17.693000 audit[5655]: USER_START pid=5655 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:17.695000 audit[5657]: CRED_ACQ pid=5657 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:17.826434 sshd[5655]: pam_unix(sshd:session): session closed for user core Jul 14 22:15:17.826000 audit[5655]: USER_END pid=5655 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:17.826000 audit[5655]: CRED_DISP pid=5655 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:17.829062 systemd[1]: sshd@13-10.0.0.132:22-10.0.0.1:42484.service: Deactivated successfully. Jul 14 22:15:17.828000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.132:22-10.0.0.1:42484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:17.829911 systemd[1]: session-14.scope: Deactivated successfully. Jul 14 22:15:17.830442 systemd-logind[1204]: Session 14 logged out. Waiting for processes to exit. Jul 14 22:15:17.831160 systemd-logind[1204]: Removed session 14. Jul 14 22:15:18.980616 kubelet[2006]: E0714 22:15:18.980572 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:15:19.980989 kubelet[2006]: E0714 22:15:19.980953 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:15:22.830961 systemd[1]: Started sshd@14-10.0.0.132:22-10.0.0.1:56328.service. Jul 14 22:15:22.832213 kernel: kauditd_printk_skb: 23 callbacks suppressed Jul 14 22:15:22.832289 kernel: audit: type=1130 audit(1752531322.830:1532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.132:22-10.0.0.1:56328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:22.830000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.132:22-10.0.0.1:56328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:22.864000 audit[5675]: USER_ACCT pid=5675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:22.865063 sshd[5675]: Accepted publickey for core from 10.0.0.1 port 56328 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:15:22.866330 sshd[5675]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:15:22.865000 audit[5675]: CRED_ACQ pid=5675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:22.871195 kernel: audit: type=1101 audit(1752531322.864:1533): pid=5675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:22.872517 kernel: audit: type=1103 audit(1752531322.865:1534): pid=5675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:22.872552 kernel: audit: type=1006 audit(1752531322.865:1535): pid=5675 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 14 22:15:22.871393 systemd-logind[1204]: New session 15 of user core. Jul 14 22:15:22.872904 kernel: audit: type=1300 audit(1752531322.865:1535): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffce892570 a2=3 a3=1 items=0 ppid=1 pid=5675 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:15:22.865000 audit[5675]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffce892570 a2=3 a3=1 items=0 ppid=1 pid=5675 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:15:22.872205 systemd[1]: Started session-15.scope. Jul 14 22:15:22.865000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:15:22.876775 kernel: audit: type=1327 audit(1752531322.865:1535): proctitle=737368643A20636F7265205B707269765D Jul 14 22:15:22.876822 kernel: audit: type=1105 audit(1752531322.875:1536): pid=5675 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:22.875000 audit[5675]: USER_START pid=5675 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:22.876000 audit[5677]: CRED_ACQ pid=5677 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:22.882897 kernel: audit: type=1103 audit(1752531322.876:1537): pid=5677 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:22.992953 sshd[5675]: pam_unix(sshd:session): session closed for user core Jul 14 22:15:22.993000 audit[5675]: USER_END pid=5675 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:22.996054 systemd[1]: sshd@14-10.0.0.132:22-10.0.0.1:56328.service: Deactivated successfully. Jul 14 22:15:22.996941 systemd[1]: session-15.scope: Deactivated successfully. Jul 14 22:15:22.997468 systemd-logind[1204]: Session 15 logged out. Waiting for processes to exit. Jul 14 22:15:22.993000 audit[5675]: CRED_DISP pid=5675 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:22.998223 systemd-logind[1204]: Removed session 15. Jul 14 22:15:23.000559 kernel: audit: type=1106 audit(1752531322.993:1538): pid=5675 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:23.000624 kernel: audit: type=1104 audit(1752531322.993:1539): pid=5675 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:22.995000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.132:22-10.0.0.1:56328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:27.997662 systemd[1]: Started sshd@15-10.0.0.132:22-10.0.0.1:56336.service. Jul 14 22:15:27.997000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.132:22-10.0.0.1:56336 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:28.001813 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 14 22:15:28.001888 kernel: audit: type=1130 audit(1752531327.997:1541): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.132:22-10.0.0.1:56336 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:28.034000 audit[5710]: USER_ACCT pid=5710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:28.035801 sshd[5710]: Accepted publickey for core from 10.0.0.1 port 56336 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:15:28.037879 sshd[5710]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:15:28.036000 audit[5710]: CRED_ACQ pid=5710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:28.042021 kernel: audit: type=1101 audit(1752531328.034:1542): pid=5710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:28.042088 kernel: audit: type=1103 audit(1752531328.036:1543): pid=5710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:28.042107 kernel: audit: type=1006 audit(1752531328.036:1544): pid=5710 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 14 22:15:28.041478 systemd-logind[1204]: New session 16 of user core. Jul 14 22:15:28.042363 systemd[1]: Started session-16.scope. Jul 14 22:15:28.036000 audit[5710]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffcd14300 a2=3 a3=1 items=0 ppid=1 pid=5710 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:15:28.047142 kernel: audit: type=1300 audit(1752531328.036:1544): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffcd14300 a2=3 a3=1 items=0 ppid=1 pid=5710 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:15:28.047210 kernel: audit: type=1327 audit(1752531328.036:1544): proctitle=737368643A20636F7265205B707269765D Jul 14 22:15:28.036000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:15:28.045000 audit[5710]: USER_START pid=5710 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:28.051515 kernel: audit: type=1105 audit(1752531328.045:1545): pid=5710 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:28.046000 audit[5712]: CRED_ACQ pid=5712 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:28.054322 kernel: audit: type=1103 audit(1752531328.046:1546): pid=5712 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:28.192701 sshd[5710]: pam_unix(sshd:session): session closed for user core Jul 14 22:15:28.193000 audit[5710]: USER_END pid=5710 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:28.195471 systemd[1]: sshd@15-10.0.0.132:22-10.0.0.1:56336.service: Deactivated successfully. Jul 14 22:15:28.196345 systemd[1]: session-16.scope: Deactivated successfully. Jul 14 22:15:28.196873 systemd-logind[1204]: Session 16 logged out. Waiting for processes to exit. Jul 14 22:15:28.193000 audit[5710]: CRED_DISP pid=5710 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:28.197605 systemd-logind[1204]: Removed session 16. Jul 14 22:15:28.200194 kernel: audit: type=1106 audit(1752531328.193:1547): pid=5710 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:28.200284 kernel: audit: type=1104 audit(1752531328.193:1548): pid=5710 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:28.194000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.132:22-10.0.0.1:56336 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:31.070000 audit[4129]: AVC avc: denied { watch } for pid=4129 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_22_14_15.848726365/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c487,c818 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c487,c818 tclass=file permissive=0 Jul 14 22:15:31.070000 audit[4129]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40010178e0 a2=fc6 a3=0 items=0 ppid=3816 pid=4129 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c487,c818 key=(null) Jul 14 22:15:31.070000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 22:15:32.151336 systemd[1]: run-containerd-runc-k8s.io-b7eb47cdf4bcc1f3a625624aee2dc2ee413efba6e1da2daa8131b9a4619bdabf-runc.Yit7hp.mount: Deactivated successfully. Jul 14 22:15:33.197704 systemd[1]: Started sshd@16-10.0.0.132:22-10.0.0.1:47900.service. Jul 14 22:15:33.199775 kernel: kauditd_printk_skb: 4 callbacks suppressed Jul 14 22:15:33.199870 kernel: audit: type=1130 audit(1752531333.196:1551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.132:22-10.0.0.1:47900 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:33.196000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.132:22-10.0.0.1:47900 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:33.236000 audit[5744]: USER_ACCT pid=5744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:33.238573 sshd[5744]: Accepted publickey for core from 10.0.0.1 port 47900 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:15:33.239787 sshd[5744]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:15:33.237000 audit[5744]: CRED_ACQ pid=5744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:33.243663 systemd-logind[1204]: New session 17 of user core. Jul 14 22:15:33.244512 systemd[1]: Started session-17.scope. Jul 14 22:15:33.244828 kernel: audit: type=1101 audit(1752531333.236:1552): pid=5744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:33.244873 kernel: audit: type=1103 audit(1752531333.237:1553): pid=5744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:33.246898 kernel: audit: type=1006 audit(1752531333.237:1554): pid=5744 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Jul 14 22:15:33.237000 audit[5744]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffddcd92e0 a2=3 a3=1 items=0 ppid=1 pid=5744 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:15:33.250302 kernel: audit: type=1300 audit(1752531333.237:1554): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffddcd92e0 a2=3 a3=1 items=0 ppid=1 pid=5744 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:15:33.250374 kernel: audit: type=1327 audit(1752531333.237:1554): proctitle=737368643A20636F7265205B707269765D Jul 14 22:15:33.237000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:15:33.246000 audit[5744]: USER_START pid=5744 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:33.254921 kernel: audit: type=1105 audit(1752531333.246:1555): pid=5744 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:33.254992 kernel: audit: type=1103 audit(1752531333.248:1556): pid=5746 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:33.248000 audit[5746]: CRED_ACQ pid=5746 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:33.371624 sshd[5744]: pam_unix(sshd:session): session closed for user core Jul 14 22:15:33.371000 audit[5744]: USER_END pid=5744 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:33.374676 systemd[1]: sshd@16-10.0.0.132:22-10.0.0.1:47900.service: Deactivated successfully. Jul 14 22:15:33.375462 systemd[1]: session-17.scope: Deactivated successfully. Jul 14 22:15:33.376075 systemd-logind[1204]: Session 17 logged out. Waiting for processes to exit. Jul 14 22:15:33.371000 audit[5744]: CRED_DISP pid=5744 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:33.376932 systemd-logind[1204]: Removed session 17. Jul 14 22:15:33.379531 kernel: audit: type=1106 audit(1752531333.371:1557): pid=5744 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:33.379593 kernel: audit: type=1104 audit(1752531333.371:1558): pid=5744 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:33.373000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.132:22-10.0.0.1:47900 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:33.992000 audit[4646]: AVC avc: denied { watch } for pid=4646 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_22_14_15.1826281546/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c377,c1014 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c377,c1014 tclass=file permissive=0 Jul 14 22:15:33.992000 audit[4646]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000b849a0 a2=fc6 a3=0 items=0 ppid=4520 pid=4646 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c377,c1014 key=(null) Jul 14 22:15:33.992000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 22:15:35.980289 kubelet[2006]: E0714 22:15:35.980237 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:15:36.981018 kubelet[2006]: E0714 22:15:36.980983 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:15:38.376032 systemd[1]: Started sshd@17-10.0.0.132:22-10.0.0.1:47916.service. Jul 14 22:15:38.375000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.132:22-10.0.0.1:47916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:38.376864 kernel: kauditd_printk_skb: 4 callbacks suppressed Jul 14 22:15:38.376947 kernel: audit: type=1130 audit(1752531338.375:1561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.132:22-10.0.0.1:47916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:38.412000 audit[5777]: USER_ACCT pid=5777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:38.413129 sshd[5777]: Accepted publickey for core from 10.0.0.1 port 47916 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:15:38.416745 kernel: audit: type=1101 audit(1752531338.412:1562): pid=5777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:38.416000 audit[5777]: CRED_ACQ pid=5777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:38.417609 sshd[5777]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:15:38.421631 systemd-logind[1204]: New session 18 of user core. Jul 14 22:15:38.422216 kernel: audit: type=1103 audit(1752531338.416:1563): pid=5777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:38.422248 kernel: audit: type=1006 audit(1752531338.416:1564): pid=5777 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Jul 14 22:15:38.422266 kernel: audit: type=1300 audit(1752531338.416:1564): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd380f490 a2=3 a3=1 items=0 ppid=1 pid=5777 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:15:38.416000 audit[5777]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd380f490 a2=3 a3=1 items=0 ppid=1 pid=5777 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:15:38.422539 systemd[1]: Started session-18.scope. Jul 14 22:15:38.416000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:15:38.427153 kernel: audit: type=1327 audit(1752531338.416:1564): proctitle=737368643A20636F7265205B707269765D Jul 14 22:15:38.427202 kernel: audit: type=1105 audit(1752531338.426:1565): pid=5777 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:38.426000 audit[5777]: USER_START pid=5777 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:38.427000 audit[5779]: CRED_ACQ pid=5779 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:38.433164 kernel: audit: type=1103 audit(1752531338.427:1566): pid=5779 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:38.575293 sshd[5777]: pam_unix(sshd:session): session closed for user core Jul 14 22:15:38.576000 audit[5777]: USER_END pid=5777 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:38.579429 systemd[1]: Started sshd@18-10.0.0.132:22-10.0.0.1:47928.service. Jul 14 22:15:38.584126 kernel: audit: type=1106 audit(1752531338.576:1567): pid=5777 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:38.584192 kernel: audit: type=1130 audit(1752531338.580:1568): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.132:22-10.0.0.1:47928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:38.580000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.132:22-10.0.0.1:47928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:38.584195 systemd[1]: sshd@17-10.0.0.132:22-10.0.0.1:47916.service: Deactivated successfully. Jul 14 22:15:38.582000 audit[5777]: CRED_DISP pid=5777 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:38.583000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.132:22-10.0.0.1:47916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:38.584985 systemd[1]: session-18.scope: Deactivated successfully. Jul 14 22:15:38.585486 systemd-logind[1204]: Session 18 logged out. Waiting for processes to exit. Jul 14 22:15:38.586232 systemd-logind[1204]: Removed session 18. Jul 14 22:15:38.612000 audit[5789]: USER_ACCT pid=5789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:38.613100 sshd[5789]: Accepted publickey for core from 10.0.0.1 port 47928 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:15:38.613000 audit[5789]: CRED_ACQ pid=5789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:38.613000 audit[5789]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0ef1cd0 a2=3 a3=1 items=0 ppid=1 pid=5789 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:15:38.613000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:15:38.614181 sshd[5789]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:15:38.617438 systemd-logind[1204]: New session 19 of user core. Jul 14 22:15:38.618320 systemd[1]: Started session-19.scope. Jul 14 22:15:38.620000 audit[5789]: USER_START pid=5789 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:38.622000 audit[5792]: CRED_ACQ pid=5792 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:41.359000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:15:41.359000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:15:41.359000 audit[1883]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=82 a1=4010018a20 a2=fc6 a3=0 items=0 ppid=1735 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 key=(null) Jul 14 22:15:41.359000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:15:41.359000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:15:41.359000 audit[1883]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=84 a1=4010ea38c0 a2=fc6 a3=0 items=0 ppid=1735 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 key=(null) Jul 14 22:15:41.359000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:15:41.359000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:15:41.359000 audit[1883]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=84 a1=4010251100 a2=fc6 a3=0 items=0 ppid=1735 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 key=(null) Jul 14 22:15:41.359000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:15:41.359000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:15:41.359000 audit[1883]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=84 a1=4010ea39b0 a2=fc6 a3=0 items=0 ppid=1735 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 key=(null) Jul 14 22:15:41.359000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:15:41.359000 audit[1883]: AVC avc: denied { watch } for pid=1883 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:15:41.359000 audit[1883]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=84 a1=4010251140 a2=fc6 a3=0 items=0 ppid=1735 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 key=(null) Jul 14 22:15:41.359000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:15:41.359000 audit[1883]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=81 a1=400efe61e0 a2=fc6 a3=0 items=0 ppid=1735 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c314 key=(null) Jul 14 22:15:41.359000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 14 22:15:41.474000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:15:41.474000 audit[1881]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002dfaf00 a2=fc6 a3=0 items=0 ppid=1708 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 key=(null) Jul 14 22:15:41.474000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:15:41.474000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:15:41.474000 audit[1881]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001913fe0 a2=fc6 a3=0 items=0 ppid=1708 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 key=(null) Jul 14 22:15:41.474000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:15:44.850638 systemd[1]: run-containerd-runc-k8s.io-9dce805f11f3d3ed9606c794fecfa7cc6ddd86f47ec7ebbcb157241a0230c5cb-runc.Sm3YTL.mount: Deactivated successfully. Jul 14 22:15:46.320000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:15:46.322021 kernel: kauditd_printk_skb: 33 callbacks suppressed Jul 14 22:15:46.322084 kernel: audit: type=1400 audit(1752531346.320:1584): avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:15:46.320000 audit[1881]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000abb780 a2=fc6 a3=0 items=0 ppid=1708 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 key=(null) Jul 14 22:15:46.328699 kernel: audit: type=1300 audit(1752531346.320:1584): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000abb780 a2=fc6 a3=0 items=0 ppid=1708 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 key=(null) Jul 14 22:15:46.328806 kernel: audit: type=1327 audit(1752531346.320:1584): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:15:46.320000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:15:46.322000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:15:46.334620 kernel: audit: type=1400 audit(1752531346.322:1585): avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:15:46.334670 kernel: audit: type=1400 audit(1752531346.322:1586): avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:15:46.322000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:15:46.322000 audit[1881]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000abba40 a2=fc6 a3=0 items=0 ppid=1708 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 key=(null) Jul 14 22:15:46.341294 kernel: audit: type=1300 audit(1752531346.322:1585): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000abba40 a2=fc6 a3=0 items=0 ppid=1708 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 key=(null) Jul 14 22:15:46.341358 kernel: audit: type=1327 audit(1752531346.322:1585): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:15:46.322000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:15:46.322000 audit[1881]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000bc23a0 a2=fc6 a3=0 items=0 ppid=1708 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 key=(null) Jul 14 22:15:46.348486 kernel: audit: type=1300 audit(1752531346.322:1586): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000bc23a0 a2=fc6 a3=0 items=0 ppid=1708 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 key=(null) Jul 14 22:15:46.348537 kernel: audit: type=1327 audit(1752531346.322:1586): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:15:46.322000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:15:46.323000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:15:46.354541 kernel: audit: type=1400 audit(1752531346.323:1587): avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:15:46.323000 audit[1881]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000bc23e0 a2=fc6 a3=0 items=0 ppid=1708 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c346,c469 key=(null) Jul 14 22:15:46.323000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:15:48.819233 sshd[5789]: pam_unix(sshd:session): session closed for user core Jul 14 22:15:48.820000 audit[5789]: USER_END pid=5789 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:48.820000 audit[5789]: CRED_DISP pid=5789 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:48.822000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.132:22-10.0.0.1:33868 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:48.823491 systemd[1]: Started sshd@19-10.0.0.132:22-10.0.0.1:33868.service. Jul 14 22:15:48.824022 systemd[1]: sshd@18-10.0.0.132:22-10.0.0.1:47928.service: Deactivated successfully. Jul 14 22:15:48.823000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.132:22-10.0.0.1:47928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:15:48.825112 systemd[1]: session-19.scope: Deactivated successfully. Jul 14 22:15:48.825913 systemd-logind[1204]: Session 19 logged out. Waiting for processes to exit. Jul 14 22:15:48.826689 systemd-logind[1204]: Removed session 19. Jul 14 22:15:48.862000 audit[5822]: USER_ACCT pid=5822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:48.863180 sshd[5822]: Accepted publickey for core from 10.0.0.1 port 33868 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:15:48.863000 audit[5822]: CRED_ACQ pid=5822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:48.863000 audit[5822]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc3d2b6b0 a2=3 a3=1 items=0 ppid=1 pid=5822 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:15:48.863000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:15:48.864479 sshd[5822]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:15:48.869780 systemd-logind[1204]: New session 20 of user core. Jul 14 22:15:48.870199 systemd[1]: Started session-20.scope. Jul 14 22:15:48.873000 audit[5822]: USER_START pid=5822 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:48.876000 audit[5825]: CRED_ACQ pid=5825 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:15:54.754485 systemd[1]: run-containerd-runc-k8s.io-b7eb47cdf4bcc1f3a625624aee2dc2ee413efba6e1da2daa8131b9a4619bdabf-runc.yNO10O.mount: Deactivated successfully. Jul 14 22:15:57.138151 systemd[1]: run-containerd-runc-k8s.io-1c920b399933298355f3dd8a79483df44bb02571c7ea5054c150b80d2ba7f227-runc.E75pZV.mount: Deactivated successfully. Jul 14 22:15:59.981140 kubelet[2006]: E0714 22:15:59.981098 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:16:09.555000 audit[5951]: NETFILTER_CFG table=filter:128 family=2 entries=20 op=nft_register_rule pid=5951 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:16:09.557923 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 14 22:16:09.557987 kernel: audit: type=1325 audit(1752531369.555:1597): table=filter:128 family=2 entries=20 op=nft_register_rule pid=5951 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:16:09.555000 audit[5951]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffed5855a0 a2=0 a3=1 items=0 ppid=2113 pid=5951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:16:09.560932 sshd[5822]: pam_unix(sshd:session): session closed for user core Jul 14 22:16:09.564237 kernel: audit: type=1300 audit(1752531369.555:1597): arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffed5855a0 a2=0 a3=1 items=0 ppid=2113 pid=5951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:16:09.564342 systemd[1]: Started sshd@20-10.0.0.132:22-10.0.0.1:47150.service. Jul 14 22:16:09.555000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:16:09.567656 kernel: audit: type=1327 audit(1752531369.555:1597): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:16:09.562000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.132:22-10.0.0.1:47150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:16:09.571264 kernel: audit: type=1130 audit(1752531369.562:1598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.132:22-10.0.0.1:47150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:16:09.565000 audit[5951]: NETFILTER_CFG table=nat:129 family=2 entries=26 op=nft_register_rule pid=5951 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:16:09.574796 systemd[1]: sshd@19-10.0.0.132:22-10.0.0.1:33868.service: Deactivated successfully. Jul 14 22:16:09.574997 kernel: audit: type=1325 audit(1752531369.565:1599): table=nat:129 family=2 entries=26 op=nft_register_rule pid=5951 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:16:09.565000 audit[5951]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffed5855a0 a2=0 a3=1 items=0 ppid=2113 pid=5951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:16:09.575916 systemd[1]: session-20.scope: Deactivated successfully. Jul 14 22:16:09.579158 kernel: audit: type=1300 audit(1752531369.565:1599): arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffed5855a0 a2=0 a3=1 items=0 ppid=2113 pid=5951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:16:09.581683 kernel: audit: type=1327 audit(1752531369.565:1599): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:16:09.581762 kernel: audit: type=1106 audit(1752531369.569:1600): pid=5822 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:09.565000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:16:09.569000 audit[5822]: USER_END pid=5822 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:09.581648 systemd-logind[1204]: Session 20 logged out. Waiting for processes to exit. Jul 14 22:16:09.569000 audit[5822]: CRED_DISP pid=5822 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:09.589233 kernel: audit: type=1104 audit(1752531369.569:1601): pid=5822 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:09.589372 systemd-logind[1204]: Removed session 20. Jul 14 22:16:09.573000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.132:22-10.0.0.1:33868 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:16:09.593007 kernel: audit: type=1131 audit(1752531369.573:1602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.132:22-10.0.0.1:33868 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:16:09.591000 audit[5957]: NETFILTER_CFG table=filter:130 family=2 entries=32 op=nft_register_rule pid=5957 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:16:09.591000 audit[5957]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffca2896c0 a2=0 a3=1 items=0 ppid=2113 pid=5957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:16:09.591000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:16:09.599000 audit[5957]: NETFILTER_CFG table=nat:131 family=2 entries=26 op=nft_register_rule pid=5957 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:16:09.599000 audit[5957]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffca2896c0 a2=0 a3=1 items=0 ppid=2113 pid=5957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:16:09.599000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:16:09.605000 audit[5953]: USER_ACCT pid=5953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:09.607475 sshd[5953]: Accepted publickey for core from 10.0.0.1 port 47150 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:16:09.607000 audit[5953]: CRED_ACQ pid=5953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:09.607000 audit[5953]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9e09550 a2=3 a3=1 items=0 ppid=1 pid=5953 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:16:09.607000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:16:09.609362 sshd[5953]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:16:09.612990 systemd-logind[1204]: New session 21 of user core. Jul 14 22:16:09.613841 systemd[1]: Started session-21.scope. Jul 14 22:16:09.616000 audit[5953]: USER_START pid=5953 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:09.618000 audit[5959]: CRED_ACQ pid=5959 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:09.994698 sshd[5953]: pam_unix(sshd:session): session closed for user core Jul 14 22:16:09.993000 audit[5953]: USER_END pid=5953 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:09.994000 audit[5953]: CRED_DISP pid=5953 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:09.998495 systemd[1]: sshd@20-10.0.0.132:22-10.0.0.1:47150.service: Deactivated successfully. Jul 14 22:16:09.996000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.132:22-10.0.0.1:47150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:16:09.999157 systemd[1]: session-21.scope: Deactivated successfully. Jul 14 22:16:09.999796 systemd-logind[1204]: Session 21 logged out. Waiting for processes to exit. Jul 14 22:16:10.000993 systemd[1]: Started sshd@21-10.0.0.132:22-10.0.0.1:47160.service. Jul 14 22:16:09.999000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.132:22-10.0.0.1:47160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:16:10.001878 systemd-logind[1204]: Removed session 21. Jul 14 22:16:10.036000 audit[5968]: USER_ACCT pid=5968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:10.038106 sshd[5968]: Accepted publickey for core from 10.0.0.1 port 47160 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:16:10.037000 audit[5968]: CRED_ACQ pid=5968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:10.037000 audit[5968]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe3d09bb0 a2=3 a3=1 items=0 ppid=1 pid=5968 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:16:10.037000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:16:10.039566 sshd[5968]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:16:10.045630 systemd-logind[1204]: New session 22 of user core. Jul 14 22:16:10.046517 systemd[1]: Started session-22.scope. Jul 14 22:16:10.048000 audit[5968]: USER_START pid=5968 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:10.050000 audit[5970]: CRED_ACQ pid=5970 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:10.171003 sshd[5968]: pam_unix(sshd:session): session closed for user core Jul 14 22:16:10.170000 audit[5968]: USER_END pid=5968 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:10.170000 audit[5968]: CRED_DISP pid=5968 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:10.174228 systemd[1]: sshd@21-10.0.0.132:22-10.0.0.1:47160.service: Deactivated successfully. Jul 14 22:16:10.172000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.132:22-10.0.0.1:47160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:16:10.175041 systemd[1]: session-22.scope: Deactivated successfully. Jul 14 22:16:10.175814 systemd-logind[1204]: Session 22 logged out. Waiting for processes to exit. Jul 14 22:16:10.176502 systemd-logind[1204]: Removed session 22. Jul 14 22:16:14.201000 audit[5982]: NETFILTER_CFG table=filter:132 family=2 entries=20 op=nft_register_rule pid=5982 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:16:14.201000 audit[5982]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffe9507570 a2=0 a3=1 items=0 ppid=2113 pid=5982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:16:14.201000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:16:14.214000 audit[5982]: NETFILTER_CFG table=nat:133 family=2 entries=110 op=nft_register_chain pid=5982 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:16:14.214000 audit[5982]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=ffffe9507570 a2=0 a3=1 items=0 ppid=2113 pid=5982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:16:14.214000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:16:15.175999 systemd[1]: Started sshd@22-10.0.0.132:22-10.0.0.1:41438.service. Jul 14 22:16:15.179758 kernel: kauditd_printk_skb: 33 callbacks suppressed Jul 14 22:16:15.179854 kernel: audit: type=1130 audit(1752531375.175:1624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.132:22-10.0.0.1:41438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:16:15.175000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.132:22-10.0.0.1:41438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:16:15.209000 audit[5984]: USER_ACCT pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:15.211316 sshd[5984]: Accepted publickey for core from 10.0.0.1 port 41438 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:16:15.211542 sshd[5984]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:16:15.210000 audit[5984]: CRED_ACQ pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:15.216203 kernel: audit: type=1101 audit(1752531375.209:1625): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:15.216291 kernel: audit: type=1103 audit(1752531375.210:1626): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:15.216314 kernel: audit: type=1006 audit(1752531375.210:1627): pid=5984 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 14 22:16:15.217387 systemd-logind[1204]: New session 23 of user core. Jul 14 22:16:15.217844 systemd[1]: Started session-23.scope. Jul 14 22:16:15.210000 audit[5984]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd8e7e7a0 a2=3 a3=1 items=0 ppid=1 pid=5984 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:16:15.221403 kernel: audit: type=1300 audit(1752531375.210:1627): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd8e7e7a0 a2=3 a3=1 items=0 ppid=1 pid=5984 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:16:15.210000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:16:15.222880 kernel: audit: type=1327 audit(1752531375.210:1627): proctitle=737368643A20636F7265205B707269765D Jul 14 22:16:15.222000 audit[5984]: USER_START pid=5984 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:15.227217 kernel: audit: type=1105 audit(1752531375.222:1628): pid=5984 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:15.224000 audit[5986]: CRED_ACQ pid=5986 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:15.231944 kernel: audit: type=1103 audit(1752531375.224:1629): pid=5986 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:15.340135 sshd[5984]: pam_unix(sshd:session): session closed for user core Jul 14 22:16:15.340000 audit[5984]: USER_END pid=5984 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:15.342769 systemd[1]: sshd@22-10.0.0.132:22-10.0.0.1:41438.service: Deactivated successfully. Jul 14 22:16:15.343548 systemd[1]: session-23.scope: Deactivated successfully. Jul 14 22:16:15.344171 systemd-logind[1204]: Session 23 logged out. Waiting for processes to exit. Jul 14 22:16:15.345340 systemd-logind[1204]: Removed session 23. Jul 14 22:16:15.340000 audit[5984]: CRED_DISP pid=5984 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:15.350418 kernel: audit: type=1106 audit(1752531375.340:1630): pid=5984 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:15.350519 kernel: audit: type=1104 audit(1752531375.340:1631): pid=5984 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:15.341000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.132:22-10.0.0.1:41438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:16:19.982987 kubelet[2006]: E0714 22:16:19.982958 2006 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:16:20.345584 systemd[1]: Started sshd@23-10.0.0.132:22-10.0.0.1:41440.service. Jul 14 22:16:20.344000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.132:22-10.0.0.1:41440 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:16:20.346763 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 14 22:16:20.346829 kernel: audit: type=1130 audit(1752531380.344:1633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.132:22-10.0.0.1:41440 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:16:20.378000 audit[5999]: USER_ACCT pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:20.379472 sshd[5999]: Accepted publickey for core from 10.0.0.1 port 41440 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:16:20.382756 kernel: audit: type=1101 audit(1752531380.378:1634): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:20.382000 audit[5999]: CRED_ACQ pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:20.383986 sshd[5999]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:16:20.388460 kernel: audit: type=1103 audit(1752531380.382:1635): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:20.388513 kernel: audit: type=1006 audit(1752531380.382:1636): pid=5999 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Jul 14 22:16:20.382000 audit[5999]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff9868ee0 a2=3 a3=1 items=0 ppid=1 pid=5999 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:16:20.391733 kernel: audit: type=1300 audit(1752531380.382:1636): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff9868ee0 a2=3 a3=1 items=0 ppid=1 pid=5999 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:16:20.382000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:16:20.392925 kernel: audit: type=1327 audit(1752531380.382:1636): proctitle=737368643A20636F7265205B707269765D Jul 14 22:16:20.394593 systemd-logind[1204]: New session 24 of user core. Jul 14 22:16:20.395062 systemd[1]: Started session-24.scope. Jul 14 22:16:20.402000 audit[5999]: USER_START pid=5999 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:20.406000 audit[6001]: CRED_ACQ pid=6001 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:20.410580 kernel: audit: type=1105 audit(1752531380.402:1637): pid=5999 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:20.410675 kernel: audit: type=1103 audit(1752531380.406:1638): pid=6001 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:20.563850 sshd[5999]: pam_unix(sshd:session): session closed for user core Jul 14 22:16:20.564000 audit[5999]: USER_END pid=5999 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:20.568710 systemd[1]: sshd@23-10.0.0.132:22-10.0.0.1:41440.service: Deactivated successfully. Jul 14 22:16:20.569487 systemd[1]: session-24.scope: Deactivated successfully. Jul 14 22:16:20.564000 audit[5999]: CRED_DISP pid=5999 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:20.572761 kernel: audit: type=1106 audit(1752531380.564:1639): pid=5999 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:20.572818 kernel: audit: type=1104 audit(1752531380.564:1640): pid=5999 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:20.568000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.132:22-10.0.0.1:41440 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:16:20.572987 systemd-logind[1204]: Session 24 logged out. Waiting for processes to exit. Jul 14 22:16:20.573821 systemd-logind[1204]: Removed session 24. Jul 14 22:16:25.569584 systemd[1]: Started sshd@24-10.0.0.132:22-10.0.0.1:39954.service. Jul 14 22:16:25.568000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.132:22-10.0.0.1:39954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:16:25.573775 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 14 22:16:25.573977 kernel: audit: type=1130 audit(1752531385.568:1642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.132:22-10.0.0.1:39954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:16:25.611000 audit[6012]: USER_ACCT pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:25.613703 sshd[6012]: Accepted publickey for core from 10.0.0.1 port 39954 ssh2: RSA SHA256:BOxEaGpHMktIkRdcKvKv9Es2//92qEL6t3QfRP9zfwU Jul 14 22:16:25.615052 sshd[6012]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:16:25.612000 audit[6012]: CRED_ACQ pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:25.619766 kernel: audit: type=1101 audit(1752531385.611:1643): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:25.619860 kernel: audit: type=1103 audit(1752531385.612:1644): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:25.619883 kernel: audit: type=1006 audit(1752531385.613:1645): pid=6012 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Jul 14 22:16:25.620700 systemd[1]: Started session-25.scope. Jul 14 22:16:25.613000 audit[6012]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcb808e40 a2=3 a3=1 items=0 ppid=1 pid=6012 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:16:25.622022 systemd-logind[1204]: New session 25 of user core. Jul 14 22:16:25.624940 kernel: audit: type=1300 audit(1752531385.613:1645): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcb808e40 a2=3 a3=1 items=0 ppid=1 pid=6012 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:16:25.625000 kernel: audit: type=1327 audit(1752531385.613:1645): proctitle=737368643A20636F7265205B707269765D Jul 14 22:16:25.613000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:16:25.624000 audit[6012]: USER_START pid=6012 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:25.629859 kernel: audit: type=1105 audit(1752531385.624:1646): pid=6012 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:25.629934 kernel: audit: type=1103 audit(1752531385.625:1647): pid=6014 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:25.625000 audit[6014]: CRED_ACQ pid=6014 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:25.779952 sshd[6012]: pam_unix(sshd:session): session closed for user core Jul 14 22:16:25.779000 audit[6012]: USER_END pid=6012 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:25.783025 systemd-logind[1204]: Session 25 logged out. Waiting for processes to exit. Jul 14 22:16:25.784206 systemd[1]: session-25.scope: Deactivated successfully. Jul 14 22:16:25.779000 audit[6012]: CRED_DISP pid=6012 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:25.785300 systemd-logind[1204]: Removed session 25. Jul 14 22:16:25.786007 systemd[1]: sshd@24-10.0.0.132:22-10.0.0.1:39954.service: Deactivated successfully. Jul 14 22:16:25.787863 kernel: audit: type=1106 audit(1752531385.779:1648): pid=6012 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:25.787967 kernel: audit: type=1104 audit(1752531385.779:1649): pid=6012 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:16:25.785000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.132:22-10.0.0.1:39954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:16:27.144594 systemd[1]: run-containerd-runc-k8s.io-1c920b399933298355f3dd8a79483df44bb02571c7ea5054c150b80d2ba7f227-runc.N7jp1y.mount: Deactivated successfully.