Dec 13 14:28:48.066482 kernel: Linux version 5.15.173-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Fri Dec 13 12:55:10 -00 2024 Dec 13 14:28:48.066507 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=8c474c3ec361ec863adbecaa85281a726e1b53f7863ecc4742be8c5f6d02a66e Dec 13 14:28:48.066517 kernel: BIOS-provided physical RAM map: Dec 13 14:28:48.066525 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Dec 13 14:28:48.066531 kernel: BIOS-e820: [mem 0x00000000000c0000-0x00000000000fffff] reserved Dec 13 14:28:48.066537 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000003ff40fff] usable Dec 13 14:28:48.066547 kernel: BIOS-e820: [mem 0x000000003ff41000-0x000000003ffc8fff] reserved Dec 13 14:28:48.066555 kernel: BIOS-e820: [mem 0x000000003ffc9000-0x000000003fffafff] ACPI data Dec 13 14:28:48.066561 kernel: BIOS-e820: [mem 0x000000003fffb000-0x000000003fffefff] ACPI NVS Dec 13 14:28:48.066567 kernel: BIOS-e820: [mem 0x000000003ffff000-0x000000003fffffff] usable Dec 13 14:28:48.066575 kernel: BIOS-e820: [mem 0x0000000100000000-0x00000002bfffffff] usable Dec 13 14:28:48.066581 kernel: printk: bootconsole [earlyser0] enabled Dec 13 14:28:48.066587 kernel: NX (Execute Disable) protection: active Dec 13 14:28:48.066595 kernel: efi: EFI v2.70 by Microsoft Dec 13 14:28:48.066606 kernel: efi: ACPI=0x3fffa000 ACPI 2.0=0x3fffa014 SMBIOS=0x3ff85000 SMBIOS 3.0=0x3ff83000 MEMATTR=0x3f5c7a98 RNG=0x3ffd1018 Dec 13 14:28:48.066613 kernel: random: crng init done Dec 13 14:28:48.066622 kernel: SMBIOS 3.1.0 present. Dec 13 14:28:48.066628 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 03/08/2024 Dec 13 14:28:48.066634 kernel: Hypervisor detected: Microsoft Hyper-V Dec 13 14:28:48.066640 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3b8030, hints 0x64e24, misc 0xbed7b2 Dec 13 14:28:48.066646 kernel: Hyper-V Host Build:20348-10.0-1-0.1633 Dec 13 14:28:48.066653 kernel: Hyper-V: Nested features: 0x1e0101 Dec 13 14:28:48.066661 kernel: Hyper-V: LAPIC Timer Frequency: 0x30d40 Dec 13 14:28:48.066668 kernel: Hyper-V: Using hypercall for remote TLB flush Dec 13 14:28:48.066677 kernel: clocksource: hyperv_clocksource_tsc_page: mask: 0xffffffffffffffff max_cycles: 0x24e6a1710, max_idle_ns: 440795202120 ns Dec 13 14:28:48.066684 kernel: tsc: Marking TSC unstable due to running on Hyper-V Dec 13 14:28:48.066693 kernel: tsc: Detected 2593.905 MHz processor Dec 13 14:28:48.066700 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Dec 13 14:28:48.066707 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Dec 13 14:28:48.066713 kernel: last_pfn = 0x2c0000 max_arch_pfn = 0x400000000 Dec 13 14:28:48.066723 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Dec 13 14:28:48.066729 kernel: e820: update [mem 0x40000000-0xffffffff] usable ==> reserved Dec 13 14:28:48.066738 kernel: last_pfn = 0x40000 max_arch_pfn = 0x400000000 Dec 13 14:28:48.066744 kernel: Using GB pages for direct mapping Dec 13 14:28:48.066751 kernel: Secure boot disabled Dec 13 14:28:48.066758 kernel: ACPI: Early table checksum verification disabled Dec 13 14:28:48.066765 kernel: ACPI: RSDP 0x000000003FFFA014 000024 (v02 VRTUAL) Dec 13 14:28:48.066771 kernel: ACPI: XSDT 0x000000003FFF90E8 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Dec 13 14:28:48.066777 kernel: ACPI: FACP 0x000000003FFF8000 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Dec 13 14:28:48.066784 kernel: ACPI: DSDT 0x000000003FFD6000 01E184 (v02 MSFTVM DSDT01 00000001 MSFT 05000000) Dec 13 14:28:48.066796 kernel: ACPI: FACS 0x000000003FFFE000 000040 Dec 13 14:28:48.066806 kernel: ACPI: OEM0 0x000000003FFF7000 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Dec 13 14:28:48.066813 kernel: ACPI: SPCR 0x000000003FFF6000 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Dec 13 14:28:48.066821 kernel: ACPI: WAET 0x000000003FFF5000 000028 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Dec 13 14:28:48.066830 kernel: ACPI: APIC 0x000000003FFD5000 000058 (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Dec 13 14:28:48.066837 kernel: ACPI: SRAT 0x000000003FFD4000 0002D0 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Dec 13 14:28:48.066849 kernel: ACPI: BGRT 0x000000003FFD3000 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Dec 13 14:28:48.066856 kernel: ACPI: FPDT 0x000000003FFD2000 000034 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Dec 13 14:28:48.066863 kernel: ACPI: Reserving FACP table memory at [mem 0x3fff8000-0x3fff8113] Dec 13 14:28:48.066870 kernel: ACPI: Reserving DSDT table memory at [mem 0x3ffd6000-0x3fff4183] Dec 13 14:28:48.066879 kernel: ACPI: Reserving FACS table memory at [mem 0x3fffe000-0x3fffe03f] Dec 13 14:28:48.066887 kernel: ACPI: Reserving OEM0 table memory at [mem 0x3fff7000-0x3fff7063] Dec 13 14:28:48.066893 kernel: ACPI: Reserving SPCR table memory at [mem 0x3fff6000-0x3fff604f] Dec 13 14:28:48.066900 kernel: ACPI: Reserving WAET table memory at [mem 0x3fff5000-0x3fff5027] Dec 13 14:28:48.066912 kernel: ACPI: Reserving APIC table memory at [mem 0x3ffd5000-0x3ffd5057] Dec 13 14:28:48.066919 kernel: ACPI: Reserving SRAT table memory at [mem 0x3ffd4000-0x3ffd42cf] Dec 13 14:28:48.066926 kernel: ACPI: Reserving BGRT table memory at [mem 0x3ffd3000-0x3ffd3037] Dec 13 14:28:48.066936 kernel: ACPI: Reserving FPDT table memory at [mem 0x3ffd2000-0x3ffd2033] Dec 13 14:28:48.066943 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Dec 13 14:28:48.066953 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Dec 13 14:28:48.066960 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x3fffffff] hotplug Dec 13 14:28:48.066970 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0x2bfffffff] hotplug Dec 13 14:28:48.066978 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2c0000000-0xfdfffffff] hotplug Dec 13 14:28:48.066989 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000-0xffffffffff] hotplug Dec 13 14:28:48.066998 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x10000000000-0x1ffffffffff] hotplug Dec 13 14:28:48.067007 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x20000000000-0x3ffffffffff] hotplug Dec 13 14:28:48.067015 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x40000000000-0x7ffffffffff] hotplug Dec 13 14:28:48.067022 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x80000000000-0xfffffffffff] hotplug Dec 13 14:28:48.067031 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000000-0x1fffffffffff] hotplug Dec 13 14:28:48.067040 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x200000000000-0x3fffffffffff] hotplug Dec 13 14:28:48.067046 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x400000000000-0x7fffffffffff] hotplug Dec 13 14:28:48.067055 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x800000000000-0xffffffffffff] hotplug Dec 13 14:28:48.067066 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000000-0x1ffffffffffff] hotplug Dec 13 14:28:48.067073 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2000000000000-0x3ffffffffffff] hotplug Dec 13 14:28:48.067083 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x4000000000000-0x7ffffffffffff] hotplug Dec 13 14:28:48.067090 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x8000000000000-0xfffffffffffff] hotplug Dec 13 14:28:48.067098 kernel: NUMA: Node 0 [mem 0x00000000-0x3fffffff] + [mem 0x100000000-0x2bfffffff] -> [mem 0x00000000-0x2bfffffff] Dec 13 14:28:48.067107 kernel: NODE_DATA(0) allocated [mem 0x2bfffa000-0x2bfffffff] Dec 13 14:28:48.067114 kernel: Zone ranges: Dec 13 14:28:48.067123 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Dec 13 14:28:48.067131 kernel: DMA32 [mem 0x0000000001000000-0x00000000ffffffff] Dec 13 14:28:48.067140 kernel: Normal [mem 0x0000000100000000-0x00000002bfffffff] Dec 13 14:28:48.067150 kernel: Movable zone start for each node Dec 13 14:28:48.067157 kernel: Early memory node ranges Dec 13 14:28:48.067164 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Dec 13 14:28:48.067174 kernel: node 0: [mem 0x0000000000100000-0x000000003ff40fff] Dec 13 14:28:48.067181 kernel: node 0: [mem 0x000000003ffff000-0x000000003fffffff] Dec 13 14:28:48.067189 kernel: node 0: [mem 0x0000000100000000-0x00000002bfffffff] Dec 13 14:28:48.067198 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x00000002bfffffff] Dec 13 14:28:48.067205 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Dec 13 14:28:48.067216 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Dec 13 14:28:48.067225 kernel: On node 0, zone DMA32: 190 pages in unavailable ranges Dec 13 14:28:48.067231 kernel: ACPI: PM-Timer IO Port: 0x408 Dec 13 14:28:48.067238 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] dfl dfl lint[0x1]) Dec 13 14:28:48.067245 kernel: IOAPIC[0]: apic_id 2, version 17, address 0xfec00000, GSI 0-23 Dec 13 14:28:48.067252 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Dec 13 14:28:48.067262 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Dec 13 14:28:48.067269 kernel: ACPI: SPCR: console: uart,io,0x3f8,115200 Dec 13 14:28:48.067276 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Dec 13 14:28:48.067285 kernel: [mem 0x40000000-0xffffffff] available for PCI devices Dec 13 14:28:48.067292 kernel: Booting paravirtualized kernel on Hyper-V Dec 13 14:28:48.067299 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Dec 13 14:28:48.067306 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Dec 13 14:28:48.067312 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u1048576 Dec 13 14:28:48.067319 kernel: pcpu-alloc: s188696 r8192 d32488 u1048576 alloc=1*2097152 Dec 13 14:28:48.067332 kernel: pcpu-alloc: [0] 0 1 Dec 13 14:28:48.067342 kernel: Hyper-V: PV spinlocks enabled Dec 13 14:28:48.067349 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Dec 13 14:28:48.067358 kernel: Built 1 zonelists, mobility grouping on. Total pages: 2062618 Dec 13 14:28:48.067370 kernel: Policy zone: Normal Dec 13 14:28:48.067378 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=8c474c3ec361ec863adbecaa85281a726e1b53f7863ecc4742be8c5f6d02a66e Dec 13 14:28:48.067387 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Dec 13 14:28:48.067395 kernel: Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes, linear) Dec 13 14:28:48.067402 kernel: Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Dec 13 14:28:48.067410 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Dec 13 14:28:48.067419 kernel: Memory: 8071680K/8387460K available (12294K kernel code, 2275K rwdata, 13716K rodata, 47472K init, 4112K bss, 315520K reserved, 0K cma-reserved) Dec 13 14:28:48.067429 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Dec 13 14:28:48.067439 kernel: ftrace: allocating 34549 entries in 135 pages Dec 13 14:28:48.067455 kernel: ftrace: allocated 135 pages with 4 groups Dec 13 14:28:48.067466 kernel: rcu: Hierarchical RCU implementation. Dec 13 14:28:48.067477 kernel: rcu: RCU event tracing is enabled. Dec 13 14:28:48.067486 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Dec 13 14:28:48.067495 kernel: Rude variant of Tasks RCU enabled. Dec 13 14:28:48.067504 kernel: Tracing variant of Tasks RCU enabled. Dec 13 14:28:48.067513 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Dec 13 14:28:48.067522 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Dec 13 14:28:48.067530 kernel: Using NULL legacy PIC Dec 13 14:28:48.067542 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 0 Dec 13 14:28:48.067550 kernel: Console: colour dummy device 80x25 Dec 13 14:28:48.067558 kernel: printk: console [tty1] enabled Dec 13 14:28:48.067567 kernel: printk: console [ttyS0] enabled Dec 13 14:28:48.067574 kernel: printk: bootconsole [earlyser0] disabled Dec 13 14:28:48.067587 kernel: ACPI: Core revision 20210730 Dec 13 14:28:48.067595 kernel: Failed to register legacy timer interrupt Dec 13 14:28:48.067605 kernel: APIC: Switch to symmetric I/O mode setup Dec 13 14:28:48.067613 kernel: Hyper-V: Using IPI hypercalls Dec 13 14:28:48.067624 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 5187.81 BogoMIPS (lpj=2593905) Dec 13 14:28:48.067633 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Dec 13 14:28:48.067643 kernel: Last level dTLB entries: 4KB 64, 2MB 0, 4MB 0, 1GB 4 Dec 13 14:28:48.067652 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Dec 13 14:28:48.067661 kernel: Spectre V2 : Mitigation: Retpolines Dec 13 14:28:48.067671 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Dec 13 14:28:48.067683 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Dec 13 14:28:48.067691 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Dec 13 14:28:48.067699 kernel: RETBleed: Vulnerable Dec 13 14:28:48.067708 kernel: Speculative Store Bypass: Vulnerable Dec 13 14:28:48.067715 kernel: TAA: Vulnerable: Clear CPU buffers attempted, no microcode Dec 13 14:28:48.067724 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Dec 13 14:28:48.067733 kernel: GDS: Unknown: Dependent on hypervisor status Dec 13 14:28:48.067743 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Dec 13 14:28:48.067751 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Dec 13 14:28:48.067761 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Dec 13 14:28:48.067771 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Dec 13 14:28:48.067783 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Dec 13 14:28:48.067790 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Dec 13 14:28:48.067797 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Dec 13 14:28:48.067808 kernel: x86/fpu: xstate_offset[5]: 832, xstate_sizes[5]: 64 Dec 13 14:28:48.067815 kernel: x86/fpu: xstate_offset[6]: 896, xstate_sizes[6]: 512 Dec 13 14:28:48.067824 kernel: x86/fpu: xstate_offset[7]: 1408, xstate_sizes[7]: 1024 Dec 13 14:28:48.067832 kernel: x86/fpu: Enabled xstate features 0xe7, context size is 2432 bytes, using 'compacted' format. Dec 13 14:28:48.067843 kernel: Freeing SMP alternatives memory: 32K Dec 13 14:28:48.067853 kernel: pid_max: default: 32768 minimum: 301 Dec 13 14:28:48.067861 kernel: LSM: Security Framework initializing Dec 13 14:28:48.067871 kernel: SELinux: Initializing. Dec 13 14:28:48.067884 kernel: Mount-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Dec 13 14:28:48.067894 kernel: Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Dec 13 14:28:48.067904 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8272CL CPU @ 2.60GHz (family: 0x6, model: 0x55, stepping: 0x7) Dec 13 14:28:48.067915 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Dec 13 14:28:48.067927 kernel: signal: max sigframe size: 3632 Dec 13 14:28:48.067939 kernel: rcu: Hierarchical SRCU implementation. Dec 13 14:28:48.067951 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Dec 13 14:28:48.067961 kernel: smp: Bringing up secondary CPUs ... Dec 13 14:28:48.067972 kernel: x86: Booting SMP configuration: Dec 13 14:28:48.067983 kernel: .... node #0, CPUs: #1 Dec 13 14:28:48.067995 kernel: TAA CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/tsx_async_abort.html for more details. Dec 13 14:28:48.068007 kernel: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Dec 13 14:28:48.068015 kernel: smp: Brought up 1 node, 2 CPUs Dec 13 14:28:48.068025 kernel: smpboot: Max logical packages: 1 Dec 13 14:28:48.068034 kernel: smpboot: Total of 2 processors activated (10375.62 BogoMIPS) Dec 13 14:28:48.068043 kernel: devtmpfs: initialized Dec 13 14:28:48.068050 kernel: x86/mm: Memory block size: 128MB Dec 13 14:28:48.068060 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x3fffb000-0x3fffefff] (16384 bytes) Dec 13 14:28:48.068071 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Dec 13 14:28:48.068081 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Dec 13 14:28:48.068088 kernel: pinctrl core: initialized pinctrl subsystem Dec 13 14:28:48.068098 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Dec 13 14:28:48.068106 kernel: audit: initializing netlink subsys (disabled) Dec 13 14:28:48.068116 kernel: audit: type=2000 audit(1734100126.023:1): state=initialized audit_enabled=0 res=1 Dec 13 14:28:48.068123 kernel: thermal_sys: Registered thermal governor 'step_wise' Dec 13 14:28:48.068131 kernel: thermal_sys: Registered thermal governor 'user_space' Dec 13 14:28:48.068141 kernel: cpuidle: using governor menu Dec 13 14:28:48.068153 kernel: ACPI: bus type PCI registered Dec 13 14:28:48.068161 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Dec 13 14:28:48.068169 kernel: dca service started, version 1.12.1 Dec 13 14:28:48.068179 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Dec 13 14:28:48.068187 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Dec 13 14:28:48.068197 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Dec 13 14:28:48.068205 kernel: ACPI: Added _OSI(Module Device) Dec 13 14:28:48.068213 kernel: ACPI: Added _OSI(Processor Device) Dec 13 14:28:48.068222 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Dec 13 14:28:48.068233 kernel: ACPI: Added _OSI(Processor Aggregator Device) Dec 13 14:28:48.068242 kernel: ACPI: Added _OSI(Linux-Dell-Video) Dec 13 14:28:48.068250 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Dec 13 14:28:48.068260 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Dec 13 14:28:48.068267 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Dec 13 14:28:48.068278 kernel: ACPI: Interpreter enabled Dec 13 14:28:48.068285 kernel: ACPI: PM: (supports S0 S5) Dec 13 14:28:48.068294 kernel: ACPI: Using IOAPIC for interrupt routing Dec 13 14:28:48.068304 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Dec 13 14:28:48.068315 kernel: ACPI: Enabled 1 GPEs in block 00 to 0F Dec 13 14:28:48.068332 kernel: iommu: Default domain type: Translated Dec 13 14:28:48.068342 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Dec 13 14:28:48.068350 kernel: vgaarb: loaded Dec 13 14:28:48.068360 kernel: pps_core: LinuxPPS API ver. 1 registered Dec 13 14:28:48.068368 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Dec 13 14:28:48.068377 kernel: PTP clock support registered Dec 13 14:28:48.068385 kernel: Registered efivars operations Dec 13 14:28:48.068394 kernel: PCI: Using ACPI for IRQ routing Dec 13 14:28:48.068403 kernel: PCI: System does not support PCI Dec 13 14:28:48.068412 kernel: clocksource: Switched to clocksource hyperv_clocksource_tsc_page Dec 13 14:28:48.068423 kernel: VFS: Disk quotas dquot_6.6.0 Dec 13 14:28:48.068430 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Dec 13 14:28:48.068441 kernel: pnp: PnP ACPI init Dec 13 14:28:48.068448 kernel: pnp: PnP ACPI: found 3 devices Dec 13 14:28:48.068457 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Dec 13 14:28:48.068466 kernel: NET: Registered PF_INET protocol family Dec 13 14:28:48.068475 kernel: IP idents hash table entries: 131072 (order: 8, 1048576 bytes, linear) Dec 13 14:28:48.068486 kernel: tcp_listen_portaddr_hash hash table entries: 4096 (order: 4, 65536 bytes, linear) Dec 13 14:28:48.068493 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Dec 13 14:28:48.068504 kernel: TCP established hash table entries: 65536 (order: 7, 524288 bytes, linear) Dec 13 14:28:48.068511 kernel: TCP bind hash table entries: 65536 (order: 8, 1048576 bytes, linear) Dec 13 14:28:48.068522 kernel: TCP: Hash tables configured (established 65536 bind 65536) Dec 13 14:28:48.068530 kernel: UDP hash table entries: 4096 (order: 5, 131072 bytes, linear) Dec 13 14:28:48.068539 kernel: UDP-Lite hash table entries: 4096 (order: 5, 131072 bytes, linear) Dec 13 14:28:48.068548 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Dec 13 14:28:48.068556 kernel: NET: Registered PF_XDP protocol family Dec 13 14:28:48.068567 kernel: PCI: CLS 0 bytes, default 64 Dec 13 14:28:48.068575 kernel: PCI-DMA: Using software bounce buffering for IO (SWIOTLB) Dec 13 14:28:48.068585 kernel: software IO TLB: mapped [mem 0x000000003a8ad000-0x000000003e8ad000] (64MB) Dec 13 14:28:48.068593 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Dec 13 14:28:48.068603 kernel: Initialise system trusted keyrings Dec 13 14:28:48.068611 kernel: workingset: timestamp_bits=39 max_order=21 bucket_order=0 Dec 13 14:28:48.068620 kernel: Key type asymmetric registered Dec 13 14:28:48.068628 kernel: Asymmetric key parser 'x509' registered Dec 13 14:28:48.068637 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Dec 13 14:28:48.068648 kernel: io scheduler mq-deadline registered Dec 13 14:28:48.068657 kernel: io scheduler kyber registered Dec 13 14:28:48.068666 kernel: io scheduler bfq registered Dec 13 14:28:48.068674 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Dec 13 14:28:48.068684 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Dec 13 14:28:48.068692 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Dec 13 14:28:48.068702 kernel: 00:01: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A Dec 13 14:28:48.068710 kernel: i8042: PNP: No PS/2 controller found. Dec 13 14:28:48.068851 kernel: rtc_cmos 00:02: registered as rtc0 Dec 13 14:28:48.068941 kernel: rtc_cmos 00:02: setting system clock to 2024-12-13T14:28:47 UTC (1734100127) Dec 13 14:28:48.069023 kernel: rtc_cmos 00:02: alarms up to one month, 114 bytes nvram Dec 13 14:28:48.069033 kernel: fail to initialize ptp_kvm Dec 13 14:28:48.069043 kernel: intel_pstate: CPU model not supported Dec 13 14:28:48.069051 kernel: efifb: probing for efifb Dec 13 14:28:48.069061 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Dec 13 14:28:48.069068 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Dec 13 14:28:48.069078 kernel: efifb: scrolling: redraw Dec 13 14:28:48.069088 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Dec 13 14:28:48.069099 kernel: Console: switching to colour frame buffer device 128x48 Dec 13 14:28:48.069106 kernel: fb0: EFI VGA frame buffer device Dec 13 14:28:48.069114 kernel: pstore: Registered efi as persistent store backend Dec 13 14:28:48.069124 kernel: NET: Registered PF_INET6 protocol family Dec 13 14:28:48.069131 kernel: Segment Routing with IPv6 Dec 13 14:28:48.069142 kernel: In-situ OAM (IOAM) with IPv6 Dec 13 14:28:48.069149 kernel: NET: Registered PF_PACKET protocol family Dec 13 14:28:48.069158 kernel: Key type dns_resolver registered Dec 13 14:28:48.069169 kernel: IPI shorthand broadcast: enabled Dec 13 14:28:48.069180 kernel: sched_clock: Marking stable (768178000, 22227200)->(974152400, -183747200) Dec 13 14:28:48.069188 kernel: registered taskstats version 1 Dec 13 14:28:48.069196 kernel: Loading compiled-in X.509 certificates Dec 13 14:28:48.069206 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.173-flatcar: e1d88c9e01f5bb2adeb5b99325e46e5ca8dff115' Dec 13 14:28:48.069214 kernel: Key type .fscrypt registered Dec 13 14:28:48.069223 kernel: Key type fscrypt-provisioning registered Dec 13 14:28:48.069231 kernel: pstore: Using crash dump compression: deflate Dec 13 14:28:48.069243 kernel: ima: No TPM chip found, activating TPM-bypass! Dec 13 14:28:48.069251 kernel: ima: Allocated hash algorithm: sha1 Dec 13 14:28:48.069261 kernel: ima: No architecture policies found Dec 13 14:28:48.069269 kernel: clk: Disabling unused clocks Dec 13 14:28:48.069277 kernel: Freeing unused kernel image (initmem) memory: 47472K Dec 13 14:28:48.069286 kernel: Write protecting the kernel read-only data: 28672k Dec 13 14:28:48.069294 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Dec 13 14:28:48.069305 kernel: Freeing unused kernel image (rodata/data gap) memory: 620K Dec 13 14:28:48.069312 kernel: Run /init as init process Dec 13 14:28:48.069321 kernel: with arguments: Dec 13 14:28:48.069341 kernel: /init Dec 13 14:28:48.069349 kernel: with environment: Dec 13 14:28:48.069357 kernel: HOME=/ Dec 13 14:28:48.069367 kernel: TERM=linux Dec 13 14:28:48.069374 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Dec 13 14:28:48.069387 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Dec 13 14:28:48.069397 systemd[1]: Detected virtualization microsoft. Dec 13 14:28:48.069410 systemd[1]: Detected architecture x86-64. Dec 13 14:28:48.069419 systemd[1]: Running in initrd. Dec 13 14:28:48.069428 systemd[1]: No hostname configured, using default hostname. Dec 13 14:28:48.069435 systemd[1]: Hostname set to . Dec 13 14:28:48.069447 systemd[1]: Initializing machine ID from random generator. Dec 13 14:28:48.069455 systemd[1]: Queued start job for default target initrd.target. Dec 13 14:28:48.069466 systemd[1]: Started systemd-ask-password-console.path. Dec 13 14:28:48.069473 systemd[1]: Reached target cryptsetup.target. Dec 13 14:28:48.069482 systemd[1]: Reached target paths.target. Dec 13 14:28:48.069493 systemd[1]: Reached target slices.target. Dec 13 14:28:48.069503 systemd[1]: Reached target swap.target. Dec 13 14:28:48.069512 systemd[1]: Reached target timers.target. Dec 13 14:28:48.069521 systemd[1]: Listening on iscsid.socket. Dec 13 14:28:48.069531 systemd[1]: Listening on iscsiuio.socket. Dec 13 14:28:48.069540 systemd[1]: Listening on systemd-journald-audit.socket. Dec 13 14:28:48.069550 systemd[1]: Listening on systemd-journald-dev-log.socket. Dec 13 14:28:48.069561 systemd[1]: Listening on systemd-journald.socket. Dec 13 14:28:48.069571 systemd[1]: Listening on systemd-networkd.socket. Dec 13 14:28:48.069579 systemd[1]: Listening on systemd-udevd-control.socket. Dec 13 14:28:48.069590 systemd[1]: Listening on systemd-udevd-kernel.socket. Dec 13 14:28:48.069598 systemd[1]: Reached target sockets.target. Dec 13 14:28:48.069608 systemd[1]: Starting kmod-static-nodes.service... Dec 13 14:28:48.069616 systemd[1]: Finished network-cleanup.service. Dec 13 14:28:48.069626 systemd[1]: Starting systemd-fsck-usr.service... Dec 13 14:28:48.069635 systemd[1]: Starting systemd-journald.service... Dec 13 14:28:48.069647 systemd[1]: Starting systemd-modules-load.service... Dec 13 14:28:48.069656 systemd[1]: Starting systemd-resolved.service... Dec 13 14:28:48.069669 systemd[1]: Starting systemd-vconsole-setup.service... Dec 13 14:28:48.069677 systemd[1]: Finished kmod-static-nodes.service. Dec 13 14:28:48.069687 kernel: audit: type=1130 audit(1734100128.067:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:48.069701 systemd-journald[183]: Journal started Dec 13 14:28:48.069750 systemd-journald[183]: Runtime Journal (/run/log/journal/28997c3dc25642d78d371f96aaa4ac67) is 8.0M, max 159.0M, 151.0M free. Dec 13 14:28:48.067000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:48.058765 systemd-modules-load[184]: Inserted module 'overlay' Dec 13 14:28:48.085343 systemd[1]: Started systemd-journald.service. Dec 13 14:28:48.087557 systemd[1]: Finished systemd-fsck-usr.service. Dec 13 14:28:48.104468 kernel: audit: type=1130 audit(1734100128.086:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:48.086000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:48.104785 systemd[1]: Finished systemd-vconsole-setup.service. Dec 13 14:28:48.104000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:48.108292 systemd[1]: Starting dracut-cmdline-ask.service... Dec 13 14:28:48.111704 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Dec 13 14:28:48.133508 kernel: audit: type=1130 audit(1734100128.104:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:48.106000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:48.142904 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Dec 13 14:28:48.162167 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Dec 13 14:28:48.162192 kernel: audit: type=1130 audit(1734100128.106:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:48.165000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:48.174972 systemd-resolved[185]: Positive Trust Anchors: Dec 13 14:28:48.185094 systemd-resolved[185]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Dec 13 14:28:48.185485 systemd-resolved[185]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Dec 13 14:28:48.188611 systemd-resolved[185]: Defaulting to hostname 'linux'. Dec 13 14:28:48.204234 kernel: audit: type=1130 audit(1734100128.165:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:48.204438 systemd[1]: Started systemd-resolved.service. Dec 13 14:28:48.210000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:48.210501 systemd[1]: Reached target nss-lookup.target. Dec 13 14:28:48.224263 kernel: Bridge firewalling registered Dec 13 14:28:48.224291 kernel: audit: type=1130 audit(1734100128.210:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:48.222767 systemd-modules-load[184]: Inserted module 'br_netfilter' Dec 13 14:28:48.231637 systemd[1]: Finished dracut-cmdline-ask.service. Dec 13 14:28:48.237234 systemd[1]: Starting dracut-cmdline.service... Dec 13 14:28:48.233000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:48.253845 dracut-cmdline[200]: dracut-dracut-053 Dec 13 14:28:48.263085 kernel: audit: type=1130 audit(1734100128.233:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:48.263119 dracut-cmdline[200]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=8c474c3ec361ec863adbecaa85281a726e1b53f7863ecc4742be8c5f6d02a66e Dec 13 14:28:48.290354 kernel: SCSI subsystem initialized Dec 13 14:28:48.316872 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Dec 13 14:28:48.316944 kernel: device-mapper: uevent: version 1.0.3 Dec 13 14:28:48.320491 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Dec 13 14:28:48.326702 kernel: Loading iSCSI transport class v2.0-870. Dec 13 14:28:48.326884 systemd-modules-load[184]: Inserted module 'dm_multipath' Dec 13 14:28:48.327562 systemd[1]: Finished systemd-modules-load.service. Dec 13 14:28:48.345473 kernel: audit: type=1130 audit(1734100128.331:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:48.331000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:48.345793 systemd[1]: Starting systemd-sysctl.service... Dec 13 14:28:48.358835 systemd[1]: Finished systemd-sysctl.service. Dec 13 14:28:48.362000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:48.375351 kernel: audit: type=1130 audit(1734100128.362:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:48.384349 kernel: iscsi: registered transport (tcp) Dec 13 14:28:48.411508 kernel: iscsi: registered transport (qla4xxx) Dec 13 14:28:48.411593 kernel: QLogic iSCSI HBA Driver Dec 13 14:28:48.441672 systemd[1]: Finished dracut-cmdline.service. Dec 13 14:28:48.446000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:48.447669 systemd[1]: Starting dracut-pre-udev.service... Dec 13 14:28:48.499354 kernel: raid6: avx512x4 gen() 18159 MB/s Dec 13 14:28:48.519340 kernel: raid6: avx512x4 xor() 7281 MB/s Dec 13 14:28:48.539339 kernel: raid6: avx512x2 gen() 18131 MB/s Dec 13 14:28:48.560344 kernel: raid6: avx512x2 xor() 29327 MB/s Dec 13 14:28:48.580339 kernel: raid6: avx512x1 gen() 18004 MB/s Dec 13 14:28:48.600341 kernel: raid6: avx512x1 xor() 26599 MB/s Dec 13 14:28:48.621341 kernel: raid6: avx2x4 gen() 18043 MB/s Dec 13 14:28:48.641339 kernel: raid6: avx2x4 xor() 7287 MB/s Dec 13 14:28:48.661338 kernel: raid6: avx2x2 gen() 18035 MB/s Dec 13 14:28:48.681359 kernel: raid6: avx2x2 xor() 21823 MB/s Dec 13 14:28:48.701336 kernel: raid6: avx2x1 gen() 13724 MB/s Dec 13 14:28:48.721336 kernel: raid6: avx2x1 xor() 18960 MB/s Dec 13 14:28:48.742340 kernel: raid6: sse2x4 gen() 11487 MB/s Dec 13 14:28:48.762334 kernel: raid6: sse2x4 xor() 6992 MB/s Dec 13 14:28:48.782336 kernel: raid6: sse2x2 gen() 12621 MB/s Dec 13 14:28:48.802340 kernel: raid6: sse2x2 xor() 7317 MB/s Dec 13 14:28:48.822336 kernel: raid6: sse2x1 gen() 11321 MB/s Dec 13 14:28:48.846732 kernel: raid6: sse2x1 xor() 5786 MB/s Dec 13 14:28:48.846748 kernel: raid6: using algorithm avx512x4 gen() 18159 MB/s Dec 13 14:28:48.846760 kernel: raid6: .... xor() 7281 MB/s, rmw enabled Dec 13 14:28:48.850087 kernel: raid6: using avx512x2 recovery algorithm Dec 13 14:28:48.869350 kernel: xor: automatically using best checksumming function avx Dec 13 14:28:48.965353 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Dec 13 14:28:48.974085 systemd[1]: Finished dracut-pre-udev.service. Dec 13 14:28:48.978000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:48.978000 audit: BPF prog-id=7 op=LOAD Dec 13 14:28:48.978000 audit: BPF prog-id=8 op=LOAD Dec 13 14:28:48.979489 systemd[1]: Starting systemd-udevd.service... Dec 13 14:28:48.993612 systemd-udevd[382]: Using default interface naming scheme 'v252'. Dec 13 14:28:48.998237 systemd[1]: Started systemd-udevd.service. Dec 13 14:28:49.005000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:49.006746 systemd[1]: Starting dracut-pre-trigger.service... Dec 13 14:28:49.023956 dracut-pre-trigger[400]: rd.md=0: removing MD RAID activation Dec 13 14:28:49.056630 systemd[1]: Finished dracut-pre-trigger.service. Dec 13 14:28:49.062000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:49.063080 systemd[1]: Starting systemd-udev-trigger.service... Dec 13 14:28:49.102000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:49.099393 systemd[1]: Finished systemd-udev-trigger.service. Dec 13 14:28:49.143346 kernel: cryptd: max_cpu_qlen set to 1000 Dec 13 14:28:49.178355 kernel: AVX2 version of gcm_enc/dec engaged. Dec 13 14:28:49.182344 kernel: hv_vmbus: Vmbus version:5.2 Dec 13 14:28:49.199351 kernel: hv_vmbus: registering driver hyperv_keyboard Dec 13 14:28:49.206536 kernel: hv_vmbus: registering driver hv_netvsc Dec 13 14:28:49.213349 kernel: AES CTR mode by8 optimization enabled Dec 13 14:28:49.224348 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/VMBUS:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input0 Dec 13 14:28:49.235350 kernel: hv_vmbus: registering driver hv_storvsc Dec 13 14:28:49.240340 kernel: hid: raw HID events driver (C) Jiri Kosina Dec 13 14:28:49.245769 kernel: scsi host1: storvsc_host_t Dec 13 14:28:49.246122 kernel: scsi host0: storvsc_host_t Dec 13 14:28:49.252602 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Dec 13 14:28:49.260364 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Dec 13 14:28:49.276725 kernel: hv_vmbus: registering driver hid_hyperv Dec 13 14:28:49.276796 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input1 Dec 13 14:28:49.276821 kernel: hid 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Dec 13 14:28:49.297346 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Dec 13 14:28:49.306704 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Dec 13 14:28:49.306727 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Dec 13 14:28:49.334117 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Dec 13 14:28:49.334307 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Dec 13 14:28:49.334481 kernel: sd 0:0:0:0: [sda] Write Protect is off Dec 13 14:28:49.334634 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Dec 13 14:28:49.334784 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Dec 13 14:28:49.334942 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Dec 13 14:28:49.334961 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Dec 13 14:28:49.335113 kernel: hv_netvsc 7c1e521f-c45f-7c1e-521f-c45f7c1e521f eth0: VF slot 1 added Dec 13 14:28:49.353938 kernel: hv_vmbus: registering driver hv_pci Dec 13 14:28:49.363351 kernel: hv_pci 002d2240-2bea-455f-b86e-6cb1f8089702: PCI VMBus probing: Using version 0x10004 Dec 13 14:28:49.447715 kernel: hv_pci 002d2240-2bea-455f-b86e-6cb1f8089702: PCI host bridge to bus 2bea:00 Dec 13 14:28:49.447902 kernel: pci_bus 2bea:00: root bus resource [mem 0xfe0000000-0xfe00fffff window] Dec 13 14:28:49.448064 kernel: pci_bus 2bea:00: No busn resource found for root bus, will use [bus 00-ff] Dec 13 14:28:49.448210 kernel: pci 2bea:00:02.0: [15b3:1016] type 00 class 0x020000 Dec 13 14:28:49.448400 kernel: pci 2bea:00:02.0: reg 0x10: [mem 0xfe0000000-0xfe00fffff 64bit pref] Dec 13 14:28:49.448557 kernel: pci 2bea:00:02.0: enabling Extended Tags Dec 13 14:28:49.448704 kernel: pci 2bea:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at 2bea:00:02.0 (capable of 63.008 Gb/s with 8.0 GT/s PCIe x8 link) Dec 13 14:28:49.448862 kernel: pci_bus 2bea:00: busn_res: [bus 00-ff] end is updated to 00 Dec 13 14:28:49.449003 kernel: pci 2bea:00:02.0: BAR 0: assigned [mem 0xfe0000000-0xfe00fffff 64bit pref] Dec 13 14:28:49.542354 kernel: mlx5_core 2bea:00:02.0: firmware version: 14.30.5000 Dec 13 14:28:49.786148 kernel: mlx5_core 2bea:00:02.0: MLX5E: StrdRq(0) RqSz(1024) StrdSz(256) RxCqeCmprss(0) Dec 13 14:28:49.786354 kernel: mlx5_core 2bea:00:02.0: Supported tc offload range - chains: 1, prios: 1 Dec 13 14:28:49.786523 kernel: mlx5_core 2bea:00:02.0: mlx5e_tc_post_act_init:40:(pid 188): firmware level support is missing Dec 13 14:28:49.786673 kernel: hv_netvsc 7c1e521f-c45f-7c1e-521f-c45f7c1e521f eth0: VF registering: eth1 Dec 13 14:28:49.786841 kernel: mlx5_core 2bea:00:02.0 eth1: joined to eth0 Dec 13 14:28:49.794346 kernel: mlx5_core 2bea:00:02.0 enP11242s1: renamed from eth1 Dec 13 14:28:51.465049 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Dec 13 14:28:51.506351 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by (udev-worker) (433) Dec 13 14:28:51.519837 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Dec 13 14:28:51.793022 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Dec 13 14:28:52.055767 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Dec 13 14:28:52.058900 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Dec 13 14:28:52.065427 systemd[1]: Starting disk-uuid.service... Dec 13 14:28:52.082073 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Dec 13 14:28:52.088363 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Dec 13 14:28:53.096355 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Dec 13 14:28:53.097625 disk-uuid[565]: The operation has completed successfully. Dec 13 14:28:53.175940 systemd[1]: disk-uuid.service: Deactivated successfully. Dec 13 14:28:53.191421 kernel: kauditd_printk_skb: 7 callbacks suppressed Dec 13 14:28:53.191455 kernel: audit: type=1130 audit(1734100133.178:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:53.178000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:53.176062 systemd[1]: Finished disk-uuid.service. Dec 13 14:28:53.207425 kernel: audit: type=1131 audit(1734100133.191:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:53.191000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:53.205043 systemd[1]: Starting verity-setup.service... Dec 13 14:28:53.232525 kernel: device-mapper: verity: sha256 using implementation "sha256-avx2" Dec 13 14:28:53.575148 systemd[1]: Found device dev-mapper-usr.device. Dec 13 14:28:53.579912 systemd[1]: Finished verity-setup.service. Dec 13 14:28:53.581000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:53.595426 kernel: audit: type=1130 audit(1734100133.581:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:53.595569 systemd[1]: Mounting sysusr-usr.mount... Dec 13 14:28:53.668368 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Dec 13 14:28:53.668083 systemd[1]: Mounted sysusr-usr.mount. Dec 13 14:28:53.672246 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Dec 13 14:28:53.676476 systemd[1]: Starting ignition-setup.service... Dec 13 14:28:53.681963 systemd[1]: Starting parse-ip-for-networkd.service... Dec 13 14:28:53.706825 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Dec 13 14:28:53.706900 kernel: BTRFS info (device sda6): using free space tree Dec 13 14:28:53.706919 kernel: BTRFS info (device sda6): has skinny extents Dec 13 14:28:53.750440 systemd[1]: Finished parse-ip-for-networkd.service. Dec 13 14:28:53.753000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:53.767360 kernel: audit: type=1130 audit(1734100133.753:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:53.767000 audit: BPF prog-id=9 op=LOAD Dec 13 14:28:53.773980 kernel: audit: type=1334 audit(1734100133.767:22): prog-id=9 op=LOAD Dec 13 14:28:53.772358 systemd[1]: Starting systemd-networkd.service... Dec 13 14:28:53.797742 systemd-networkd[804]: lo: Link UP Dec 13 14:28:53.799221 systemd-networkd[804]: lo: Gained carrier Dec 13 14:28:53.801431 systemd-networkd[804]: Enumeration completed Dec 13 14:28:53.803000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:53.801531 systemd[1]: Started systemd-networkd.service. Dec 13 14:28:53.820848 kernel: audit: type=1130 audit(1734100133.803:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:53.803984 systemd[1]: Reached target network.target. Dec 13 14:28:53.818465 systemd-networkd[804]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Dec 13 14:28:53.819826 systemd[1]: Starting iscsiuio.service... Dec 13 14:28:53.830191 systemd[1]: Started iscsiuio.service. Dec 13 14:28:53.852097 kernel: audit: type=1130 audit(1734100133.833:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:53.833000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:53.846379 systemd[1]: Starting iscsid.service... Dec 13 14:28:53.856000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:53.854852 systemd[1]: Started iscsid.service. Dec 13 14:28:53.875734 kernel: audit: type=1130 audit(1734100133.856:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:53.875792 iscsid[812]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Dec 13 14:28:53.875792 iscsid[812]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Dec 13 14:28:53.875792 iscsid[812]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Dec 13 14:28:53.875792 iscsid[812]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Dec 13 14:28:53.875792 iscsid[812]: If using hardware iscsi like qla4xxx this message can be ignored. Dec 13 14:28:53.875792 iscsid[812]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Dec 13 14:28:53.875792 iscsid[812]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Dec 13 14:28:53.914556 kernel: audit: type=1130 audit(1734100133.880:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:53.880000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:53.859105 systemd[1]: mnt-oem.mount: Deactivated successfully. Dec 13 14:28:53.860216 systemd[1]: Starting dracut-initqueue.service... Dec 13 14:28:53.875878 systemd[1]: Finished dracut-initqueue.service. Dec 13 14:28:53.905722 systemd[1]: Reached target remote-fs-pre.target. Dec 13 14:28:53.913135 systemd[1]: Reached target remote-cryptsetup.target. Dec 13 14:28:53.930341 kernel: mlx5_core 2bea:00:02.0 enP11242s1: Link up Dec 13 14:28:53.933806 systemd[1]: Reached target remote-fs.target. Dec 13 14:28:53.938955 systemd[1]: Starting dracut-pre-mount.service... Dec 13 14:28:53.947566 systemd[1]: Finished dracut-pre-mount.service. Dec 13 14:28:53.951000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:53.969495 kernel: audit: type=1130 audit(1734100133.951:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:53.969544 kernel: hv_netvsc 7c1e521f-c45f-7c1e-521f-c45f7c1e521f eth0: Data path switched to VF: enP11242s1 Dec 13 14:28:53.969721 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Dec 13 14:28:53.974483 systemd-networkd[804]: enP11242s1: Link UP Dec 13 14:28:53.974615 systemd-networkd[804]: eth0: Link UP Dec 13 14:28:53.974771 systemd-networkd[804]: eth0: Gained carrier Dec 13 14:28:53.982537 systemd-networkd[804]: enP11242s1: Gained carrier Dec 13 14:28:54.004424 systemd-networkd[804]: eth0: DHCPv4 address 10.200.8.24/24, gateway 10.200.8.1 acquired from 168.63.129.16 Dec 13 14:28:54.113460 systemd[1]: Finished ignition-setup.service. Dec 13 14:28:54.115865 systemd[1]: Starting ignition-fetch-offline.service... Dec 13 14:28:54.114000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:28:55.474583 systemd-networkd[804]: eth0: Gained IPv6LL Dec 13 14:29:00.744610 ignition[831]: Ignition 2.14.0 Dec 13 14:29:00.744626 ignition[831]: Stage: fetch-offline Dec 13 14:29:00.744733 ignition[831]: reading system config file "/usr/lib/ignition/base.d/base.ign" Dec 13 14:29:00.744786 ignition[831]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Dec 13 14:29:00.950821 ignition[831]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Dec 13 14:29:00.951022 ignition[831]: parsed url from cmdline: "" Dec 13 14:29:00.951027 ignition[831]: no config URL provided Dec 13 14:29:00.951032 ignition[831]: reading system config file "/usr/lib/ignition/user.ign" Dec 13 14:29:00.951042 ignition[831]: no config at "/usr/lib/ignition/user.ign" Dec 13 14:29:00.951047 ignition[831]: failed to fetch config: resource requires networking Dec 13 14:29:00.954429 ignition[831]: Ignition finished successfully Dec 13 14:29:00.967049 systemd[1]: Finished ignition-fetch-offline.service. Dec 13 14:29:00.970633 systemd[1]: Starting ignition-fetch.service... Dec 13 14:29:00.980372 kernel: kauditd_printk_skb: 1 callbacks suppressed Dec 13 14:29:00.980410 kernel: audit: type=1130 audit(1734100140.969:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:00.969000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:00.994377 ignition[837]: Ignition 2.14.0 Dec 13 14:29:00.994386 ignition[837]: Stage: fetch Dec 13 14:29:00.994522 ignition[837]: reading system config file "/usr/lib/ignition/base.d/base.ign" Dec 13 14:29:00.994554 ignition[837]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Dec 13 14:29:01.004866 ignition[837]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Dec 13 14:29:01.007803 ignition[837]: parsed url from cmdline: "" Dec 13 14:29:01.007811 ignition[837]: no config URL provided Dec 13 14:29:01.007819 ignition[837]: reading system config file "/usr/lib/ignition/user.ign" Dec 13 14:29:01.007831 ignition[837]: no config at "/usr/lib/ignition/user.ign" Dec 13 14:29:01.007876 ignition[837]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Dec 13 14:29:01.091049 ignition[837]: GET result: OK Dec 13 14:29:01.091219 ignition[837]: config has been read from IMDS userdata Dec 13 14:29:01.091261 ignition[837]: parsing config with SHA512: 7691a1698236ff4397c3f35fcd637a2ca8094b947a2b9525928ae312b93b24f56fa3d6399d5835161e0c1b137ec620c0a0194ef03d8601c86e9a28c9ec934596 Dec 13 14:29:01.095445 unknown[837]: fetched base config from "system" Dec 13 14:29:01.095454 unknown[837]: fetched base config from "system" Dec 13 14:29:01.099000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:01.096090 ignition[837]: fetch: fetch complete Dec 13 14:29:01.117833 kernel: audit: type=1130 audit(1734100141.099:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:01.095460 unknown[837]: fetched user config from "azure" Dec 13 14:29:01.096097 ignition[837]: fetch: fetch passed Dec 13 14:29:01.097697 systemd[1]: Finished ignition-fetch.service. Dec 13 14:29:01.096137 ignition[837]: Ignition finished successfully Dec 13 14:29:01.100868 systemd[1]: Starting ignition-kargs.service... Dec 13 14:29:01.135417 ignition[843]: Ignition 2.14.0 Dec 13 14:29:01.135427 ignition[843]: Stage: kargs Dec 13 14:29:01.135559 ignition[843]: reading system config file "/usr/lib/ignition/base.d/base.ign" Dec 13 14:29:01.135585 ignition[843]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Dec 13 14:29:01.143466 ignition[843]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Dec 13 14:29:01.148713 ignition[843]: kargs: kargs passed Dec 13 14:29:01.148781 ignition[843]: Ignition finished successfully Dec 13 14:29:01.153065 systemd[1]: Finished ignition-kargs.service. Dec 13 14:29:01.173367 kernel: audit: type=1130 audit(1734100141.156:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:01.156000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:01.170010 systemd[1]: Starting ignition-disks.service... Dec 13 14:29:01.178601 ignition[849]: Ignition 2.14.0 Dec 13 14:29:01.178612 ignition[849]: Stage: disks Dec 13 14:29:01.178767 ignition[849]: reading system config file "/usr/lib/ignition/base.d/base.ign" Dec 13 14:29:01.178802 ignition[849]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Dec 13 14:29:01.186521 ignition[849]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Dec 13 14:29:01.188110 ignition[849]: disks: disks passed Dec 13 14:29:01.191000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:01.189009 systemd[1]: Finished ignition-disks.service. Dec 13 14:29:01.209781 kernel: audit: type=1130 audit(1734100141.191:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:01.188169 ignition[849]: Ignition finished successfully Dec 13 14:29:01.191767 systemd[1]: Reached target initrd-root-device.target. Dec 13 14:29:01.205810 systemd[1]: Reached target local-fs-pre.target. Dec 13 14:29:01.209752 systemd[1]: Reached target local-fs.target. Dec 13 14:29:01.211778 systemd[1]: Reached target sysinit.target. Dec 13 14:29:01.213740 systemd[1]: Reached target basic.target. Dec 13 14:29:01.218263 systemd[1]: Starting systemd-fsck-root.service... Dec 13 14:29:01.311078 systemd-fsck[857]: ROOT: clean, 621/7326000 files, 481077/7359488 blocks Dec 13 14:29:01.316958 systemd[1]: Finished systemd-fsck-root.service. Dec 13 14:29:01.321000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:01.322492 systemd[1]: Mounting sysroot.mount... Dec 13 14:29:01.336813 kernel: audit: type=1130 audit(1734100141.321:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:01.345340 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Dec 13 14:29:01.345491 systemd[1]: Mounted sysroot.mount. Dec 13 14:29:01.349128 systemd[1]: Reached target initrd-root-fs.target. Dec 13 14:29:01.416999 systemd[1]: Mounting sysroot-usr.mount... Dec 13 14:29:01.422778 systemd[1]: Starting flatcar-metadata-hostname.service... Dec 13 14:29:01.424882 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Dec 13 14:29:01.424916 systemd[1]: Reached target ignition-diskful.target. Dec 13 14:29:01.430206 systemd[1]: Mounted sysroot-usr.mount. Dec 13 14:29:01.524071 systemd[1]: Mounting sysroot-usr-share-oem.mount... Dec 13 14:29:01.528548 systemd[1]: Starting initrd-setup-root.service... Dec 13 14:29:01.546357 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/sda6 scanned by mount (868) Dec 13 14:29:01.555488 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Dec 13 14:29:01.555545 kernel: BTRFS info (device sda6): using free space tree Dec 13 14:29:01.555557 kernel: BTRFS info (device sda6): has skinny extents Dec 13 14:29:01.562895 systemd[1]: Mounted sysroot-usr-share-oem.mount. Dec 13 14:29:01.567452 initrd-setup-root[873]: cut: /sysroot/etc/passwd: No such file or directory Dec 13 14:29:01.601892 initrd-setup-root[899]: cut: /sysroot/etc/group: No such file or directory Dec 13 14:29:01.639184 initrd-setup-root[907]: cut: /sysroot/etc/shadow: No such file or directory Dec 13 14:29:01.646315 initrd-setup-root[915]: cut: /sysroot/etc/gshadow: No such file or directory Dec 13 14:29:02.702873 systemd[1]: Finished initrd-setup-root.service. Dec 13 14:29:02.705000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:02.720397 kernel: audit: type=1130 audit(1734100142.705:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:02.718974 systemd[1]: Starting ignition-mount.service... Dec 13 14:29:02.722264 systemd[1]: Starting sysroot-boot.service... Dec 13 14:29:02.734900 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Dec 13 14:29:02.735038 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Dec 13 14:29:02.750633 systemd[1]: Finished sysroot-boot.service. Dec 13 14:29:02.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:02.768354 kernel: audit: type=1130 audit(1734100142.754:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:02.772028 ignition[937]: INFO : Ignition 2.14.0 Dec 13 14:29:02.772028 ignition[937]: INFO : Stage: mount Dec 13 14:29:02.776283 ignition[937]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Dec 13 14:29:02.776283 ignition[937]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Dec 13 14:29:02.776283 ignition[937]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Dec 13 14:29:02.802720 kernel: audit: type=1130 audit(1734100142.789:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:02.789000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:02.802830 ignition[937]: INFO : mount: mount passed Dec 13 14:29:02.802830 ignition[937]: INFO : Ignition finished successfully Dec 13 14:29:02.787456 systemd[1]: Finished ignition-mount.service. Dec 13 14:29:04.065965 coreos-metadata[867]: Dec 13 14:29:04.065 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Dec 13 14:29:04.098546 coreos-metadata[867]: Dec 13 14:29:04.098 INFO Fetch successful Dec 13 14:29:04.134182 coreos-metadata[867]: Dec 13 14:29:04.134 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Dec 13 14:29:04.147604 coreos-metadata[867]: Dec 13 14:29:04.147 INFO Fetch successful Dec 13 14:29:04.189883 coreos-metadata[867]: Dec 13 14:29:04.189 INFO wrote hostname ci-3510.3.6-a-f6adf0345d to /sysroot/etc/hostname Dec 13 14:29:04.196584 systemd[1]: Finished flatcar-metadata-hostname.service. Dec 13 14:29:04.201000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:04.202310 systemd[1]: Starting ignition-files.service... Dec 13 14:29:04.215679 kernel: audit: type=1130 audit(1734100144.201:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:04.221430 systemd[1]: Mounting sysroot-usr-share-oem.mount... Dec 13 14:29:04.236449 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/sda6 scanned by mount (946) Dec 13 14:29:04.245550 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Dec 13 14:29:04.245594 kernel: BTRFS info (device sda6): using free space tree Dec 13 14:29:04.245608 kernel: BTRFS info (device sda6): has skinny extents Dec 13 14:29:04.253835 systemd[1]: Mounted sysroot-usr-share-oem.mount. Dec 13 14:29:04.266786 ignition[965]: INFO : Ignition 2.14.0 Dec 13 14:29:04.266786 ignition[965]: INFO : Stage: files Dec 13 14:29:04.270969 ignition[965]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Dec 13 14:29:04.270969 ignition[965]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Dec 13 14:29:04.283908 ignition[965]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Dec 13 14:29:04.298774 ignition[965]: DEBUG : files: compiled without relabeling support, skipping Dec 13 14:29:04.301952 ignition[965]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Dec 13 14:29:04.305584 ignition[965]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Dec 13 14:29:04.364813 ignition[965]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Dec 13 14:29:04.368972 ignition[965]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Dec 13 14:29:04.368972 ignition[965]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Dec 13 14:29:04.365591 unknown[965]: wrote ssh authorized keys file for user: core Dec 13 14:29:04.378935 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Dec 13 14:29:04.378935 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.13.2-linux-amd64.tar.gz: attempt #1 Dec 13 14:29:04.552490 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Dec 13 14:29:04.750417 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Dec 13 14:29:04.750417 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Dec 13 14:29:04.765970 kernel: BTRFS info: devid 1 device path /dev/sda6 changed to /dev/disk/by-label/OEM scanned by ignition (970) Dec 13 14:29:04.766001 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Dec 13 14:29:04.766001 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Dec 13 14:29:04.766001 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Dec 13 14:29:04.766001 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Dec 13 14:29:04.766001 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Dec 13 14:29:04.766001 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Dec 13 14:29:04.766001 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Dec 13 14:29:04.766001 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Dec 13 14:29:04.766001 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Dec 13 14:29:04.766001 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.0-x86-64.raw" Dec 13 14:29:04.766001 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.0-x86-64.raw" Dec 13 14:29:04.766001 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Dec 13 14:29:04.766001 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(a): oem config not found in "/usr/share/oem", looking on oem partition Dec 13 14:29:04.766001 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3436048253" Dec 13 14:29:04.766001 ignition[965]: CRITICAL : files: createFilesystemsFiles: createFiles: op(a): op(b): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3436048253": device or resource busy Dec 13 14:29:04.840792 ignition[965]: ERROR : files: createFilesystemsFiles: createFiles: op(a): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3436048253", trying btrfs: device or resource busy Dec 13 14:29:04.840792 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3436048253" Dec 13 14:29:04.840792 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3436048253" Dec 13 14:29:04.840792 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [started] unmounting "/mnt/oem3436048253" Dec 13 14:29:04.840792 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [finished] unmounting "/mnt/oem3436048253" Dec 13 14:29:04.840792 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Dec 13 14:29:04.840792 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Dec 13 14:29:04.840792 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(e): oem config not found in "/usr/share/oem", looking on oem partition Dec 13 14:29:04.840792 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(f): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3291340608" Dec 13 14:29:04.840792 ignition[965]: CRITICAL : files: createFilesystemsFiles: createFiles: op(e): op(f): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3291340608": device or resource busy Dec 13 14:29:04.840792 ignition[965]: ERROR : files: createFilesystemsFiles: createFiles: op(e): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3291340608", trying btrfs: device or resource busy Dec 13 14:29:04.840792 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(10): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3291340608" Dec 13 14:29:04.840792 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(10): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3291340608" Dec 13 14:29:04.840792 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(11): [started] unmounting "/mnt/oem3291340608" Dec 13 14:29:04.840792 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(11): [finished] unmounting "/mnt/oem3291340608" Dec 13 14:29:04.776120 systemd[1]: mnt-oem3436048253.mount: Deactivated successfully. Dec 13 14:29:04.920117 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Dec 13 14:29:04.920117 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(12): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.0-x86-64.raw" Dec 13 14:29:04.920117 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(12): GET https://github.com/flatcar/sysext-bakery/releases/download/latest/kubernetes-v1.31.0-x86-64.raw: attempt #1 Dec 13 14:29:04.795739 systemd[1]: mnt-oem3291340608.mount: Deactivated successfully. Dec 13 14:29:05.355275 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(12): GET result: OK Dec 13 14:29:05.745335 ignition[965]: INFO : files: createFilesystemsFiles: createFiles: op(12): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.0-x86-64.raw" Dec 13 14:29:05.745335 ignition[965]: INFO : files: op(13): [started] processing unit "waagent.service" Dec 13 14:29:05.745335 ignition[965]: INFO : files: op(13): [finished] processing unit "waagent.service" Dec 13 14:29:05.745335 ignition[965]: INFO : files: op(14): [started] processing unit "nvidia.service" Dec 13 14:29:05.745335 ignition[965]: INFO : files: op(14): [finished] processing unit "nvidia.service" Dec 13 14:29:05.745335 ignition[965]: INFO : files: op(15): [started] processing unit "prepare-helm.service" Dec 13 14:29:05.779033 kernel: audit: type=1130 audit(1734100145.761:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:05.761000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:05.779127 ignition[965]: INFO : files: op(15): op(16): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Dec 13 14:29:05.779127 ignition[965]: INFO : files: op(15): op(16): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Dec 13 14:29:05.779127 ignition[965]: INFO : files: op(15): [finished] processing unit "prepare-helm.service" Dec 13 14:29:05.779127 ignition[965]: INFO : files: op(17): [started] setting preset to enabled for "waagent.service" Dec 13 14:29:05.779127 ignition[965]: INFO : files: op(17): [finished] setting preset to enabled for "waagent.service" Dec 13 14:29:05.779127 ignition[965]: INFO : files: op(18): [started] setting preset to enabled for "nvidia.service" Dec 13 14:29:05.779127 ignition[965]: INFO : files: op(18): [finished] setting preset to enabled for "nvidia.service" Dec 13 14:29:05.779127 ignition[965]: INFO : files: op(19): [started] setting preset to enabled for "prepare-helm.service" Dec 13 14:29:05.779127 ignition[965]: INFO : files: op(19): [finished] setting preset to enabled for "prepare-helm.service" Dec 13 14:29:05.779127 ignition[965]: INFO : files: createResultFile: createFiles: op(1a): [started] writing file "/sysroot/etc/.ignition-result.json" Dec 13 14:29:05.779127 ignition[965]: INFO : files: createResultFile: createFiles: op(1a): [finished] writing file "/sysroot/etc/.ignition-result.json" Dec 13 14:29:05.779127 ignition[965]: INFO : files: files passed Dec 13 14:29:05.779127 ignition[965]: INFO : Ignition finished successfully Dec 13 14:29:05.815000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:05.815000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:05.825000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:05.756926 systemd[1]: Finished ignition-files.service. Dec 13 14:29:05.763319 systemd[1]: Starting initrd-setup-root-after-ignition.service... Dec 13 14:29:05.834024 initrd-setup-root-after-ignition[990]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Dec 13 14:29:05.782279 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Dec 13 14:29:05.783128 systemd[1]: Starting ignition-quench.service... Dec 13 14:29:05.788214 systemd[1]: ignition-quench.service: Deactivated successfully. Dec 13 14:29:05.788307 systemd[1]: Finished ignition-quench.service. Dec 13 14:29:05.820582 systemd[1]: Finished initrd-setup-root-after-ignition.service. Dec 13 14:29:05.826316 systemd[1]: Reached target ignition-complete.target. Dec 13 14:29:05.863971 systemd[1]: Starting initrd-parse-etc.service... Dec 13 14:29:05.882017 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Dec 13 14:29:05.882133 systemd[1]: Finished initrd-parse-etc.service. Dec 13 14:29:05.888000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:05.888000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:05.888887 systemd[1]: Reached target initrd-fs.target. Dec 13 14:29:05.893028 systemd[1]: Reached target initrd.target. Dec 13 14:29:05.895144 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Dec 13 14:29:05.896071 systemd[1]: Starting dracut-pre-pivot.service... Dec 13 14:29:05.909301 systemd[1]: Finished dracut-pre-pivot.service. Dec 13 14:29:05.913000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:05.914410 systemd[1]: Starting initrd-cleanup.service... Dec 13 14:29:05.924569 systemd[1]: Stopped target nss-lookup.target. Dec 13 14:29:05.926000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:05.932000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:05.932000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:05.933000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:05.933000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:05.934000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:05.939000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:05.975181 iscsid[812]: iscsid shutting down. Dec 13 14:29:05.925772 systemd[1]: Stopped target remote-cryptsetup.target. Dec 13 14:29:05.926234 systemd[1]: Stopped target timers.target. Dec 13 14:29:05.926673 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Dec 13 14:29:05.926801 systemd[1]: Stopped dracut-pre-pivot.service. Dec 13 14:29:05.927224 systemd[1]: Stopped target initrd.target. Dec 13 14:29:05.927536 systemd[1]: Stopped target basic.target. Dec 13 14:29:05.927944 systemd[1]: Stopped target ignition-complete.target. Dec 13 14:29:05.928365 systemd[1]: Stopped target ignition-diskful.target. Dec 13 14:29:05.928783 systemd[1]: Stopped target initrd-root-device.target. Dec 13 14:29:05.929208 systemd[1]: Stopped target remote-fs.target. Dec 13 14:29:05.929740 systemd[1]: Stopped target remote-fs-pre.target. Dec 13 14:29:06.023374 kernel: kauditd_printk_skb: 13 callbacks suppressed Dec 13 14:29:06.023400 kernel: audit: type=1131 audit(1734100146.004:52): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.004000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.023473 ignition[1003]: INFO : Ignition 2.14.0 Dec 13 14:29:06.023473 ignition[1003]: INFO : Stage: umount Dec 13 14:29:06.023473 ignition[1003]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Dec 13 14:29:06.023473 ignition[1003]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Dec 13 14:29:06.023473 ignition[1003]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Dec 13 14:29:06.023473 ignition[1003]: INFO : umount: umount passed Dec 13 14:29:06.023473 ignition[1003]: INFO : Ignition finished successfully Dec 13 14:29:06.110623 kernel: audit: type=1131 audit(1734100146.028:53): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.110659 kernel: audit: type=1131 audit(1734100146.046:54): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.110677 kernel: audit: type=1131 audit(1734100146.061:55): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.110701 kernel: audit: type=1131 audit(1734100146.078:56): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.110716 kernel: audit: type=1131 audit(1734100146.093:57): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.028000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.046000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.061000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.078000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.093000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:05.930205 systemd[1]: Stopped target sysinit.target. Dec 13 14:29:06.139729 kernel: audit: type=1131 audit(1734100146.110:58): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.139766 kernel: audit: type=1131 audit(1734100146.113:59): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.110000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.113000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:05.930648 systemd[1]: Stopped target local-fs.target. Dec 13 14:29:05.931054 systemd[1]: Stopped target local-fs-pre.target. Dec 13 14:29:05.931476 systemd[1]: Stopped target swap.target. Dec 13 14:29:05.931946 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Dec 13 14:29:05.932068 systemd[1]: Stopped dracut-pre-mount.service. Dec 13 14:29:05.932501 systemd[1]: Stopped target cryptsetup.target. Dec 13 14:29:05.932801 systemd[1]: dracut-initqueue.service: Deactivated successfully. Dec 13 14:29:05.932913 systemd[1]: Stopped dracut-initqueue.service. Dec 13 14:29:05.933336 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Dec 13 14:29:05.933453 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Dec 13 14:29:05.933701 systemd[1]: ignition-files.service: Deactivated successfully. Dec 13 14:29:05.933800 systemd[1]: Stopped ignition-files.service. Dec 13 14:29:05.934296 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Dec 13 14:29:05.934419 systemd[1]: Stopped flatcar-metadata-hostname.service. Dec 13 14:29:05.935680 systemd[1]: Stopping ignition-mount.service... Dec 13 14:29:05.938437 systemd[1]: Stopping iscsid.service... Dec 13 14:29:05.938589 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Dec 13 14:29:05.938743 systemd[1]: Stopped kmod-static-nodes.service. Dec 13 14:29:05.983520 systemd[1]: Stopping sysroot-boot.service... Dec 13 14:29:05.998245 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Dec 13 14:29:06.000232 systemd[1]: Stopped systemd-udev-trigger.service. Dec 13 14:29:06.004611 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Dec 13 14:29:06.004721 systemd[1]: Stopped dracut-pre-trigger.service. Dec 13 14:29:06.032259 systemd[1]: sysroot-boot.mount: Deactivated successfully. Dec 13 14:29:06.033038 systemd[1]: iscsid.service: Deactivated successfully. Dec 13 14:29:06.033146 systemd[1]: Stopped iscsid.service. Dec 13 14:29:06.046881 systemd[1]: ignition-mount.service: Deactivated successfully. Dec 13 14:29:06.046978 systemd[1]: Stopped ignition-mount.service. Dec 13 14:29:06.062415 systemd[1]: ignition-disks.service: Deactivated successfully. Dec 13 14:29:06.062526 systemd[1]: Stopped ignition-disks.service. Dec 13 14:29:06.078546 systemd[1]: ignition-kargs.service: Deactivated successfully. Dec 13 14:29:06.078595 systemd[1]: Stopped ignition-kargs.service. Dec 13 14:29:06.093619 systemd[1]: ignition-fetch.service: Deactivated successfully. Dec 13 14:29:06.093671 systemd[1]: Stopped ignition-fetch.service. Dec 13 14:29:06.110695 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Dec 13 14:29:06.110757 systemd[1]: Stopped ignition-fetch-offline.service. Dec 13 14:29:06.124240 systemd[1]: Stopped target paths.target. Dec 13 14:29:06.143400 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Dec 13 14:29:06.149070 systemd[1]: Stopped systemd-ask-password-console.path. Dec 13 14:29:06.155141 systemd[1]: Stopped target slices.target. Dec 13 14:29:06.225413 systemd[1]: Stopped target sockets.target. Dec 13 14:29:06.229580 systemd[1]: iscsid.socket: Deactivated successfully. Dec 13 14:29:06.229645 systemd[1]: Closed iscsid.socket. Dec 13 14:29:06.234918 systemd[1]: ignition-setup.service: Deactivated successfully. Dec 13 14:29:06.234988 systemd[1]: Stopped ignition-setup.service. Dec 13 14:29:06.241000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.241239 systemd[1]: Stopping iscsiuio.service... Dec 13 14:29:06.259554 kernel: audit: type=1131 audit(1734100146.241:60): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.256345 systemd[1]: iscsiuio.service: Deactivated successfully. Dec 13 14:29:06.259000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.256443 systemd[1]: Stopped iscsiuio.service. Dec 13 14:29:06.274818 kernel: audit: type=1131 audit(1734100146.259:61): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.259775 systemd[1]: initrd-cleanup.service: Deactivated successfully. Dec 13 14:29:06.274000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.274000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.259868 systemd[1]: Finished initrd-cleanup.service. Dec 13 14:29:06.279609 systemd[1]: Stopped target network.target. Dec 13 14:29:06.283545 systemd[1]: iscsiuio.socket: Deactivated successfully. Dec 13 14:29:06.283602 systemd[1]: Closed iscsiuio.socket. Dec 13 14:29:06.289307 systemd[1]: Stopping systemd-networkd.service... Dec 13 14:29:06.293588 systemd[1]: Stopping systemd-resolved.service... Dec 13 14:29:06.299499 systemd[1]: systemd-resolved.service: Deactivated successfully. Dec 13 14:29:06.303000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.299611 systemd[1]: Stopped systemd-resolved.service. Dec 13 14:29:06.308000 audit: BPF prog-id=6 op=UNLOAD Dec 13 14:29:06.308403 systemd-networkd[804]: eth0: DHCPv6 lease lost Dec 13 14:29:06.311663 systemd[1]: systemd-networkd.service: Deactivated successfully. Dec 13 14:29:06.314125 systemd[1]: Stopped systemd-networkd.service. Dec 13 14:29:06.318000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.318000 audit: BPF prog-id=9 op=UNLOAD Dec 13 14:29:06.318876 systemd[1]: systemd-networkd.socket: Deactivated successfully. Dec 13 14:29:06.318933 systemd[1]: Closed systemd-networkd.socket. Dec 13 14:29:06.326176 systemd[1]: Stopping network-cleanup.service... Dec 13 14:29:06.330089 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Dec 13 14:29:06.330173 systemd[1]: Stopped parse-ip-for-networkd.service. Dec 13 14:29:06.336000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.337056 systemd[1]: systemd-sysctl.service: Deactivated successfully. Dec 13 14:29:06.337120 systemd[1]: Stopped systemd-sysctl.service. Dec 13 14:29:06.343000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.343527 systemd[1]: systemd-modules-load.service: Deactivated successfully. Dec 13 14:29:06.343589 systemd[1]: Stopped systemd-modules-load.service. Dec 13 14:29:06.350000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.350232 systemd[1]: Stopping systemd-udevd.service... Dec 13 14:29:06.355170 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Dec 13 14:29:06.358969 systemd[1]: systemd-udevd.service: Deactivated successfully. Dec 13 14:29:06.361355 systemd[1]: Stopped systemd-udevd.service. Dec 13 14:29:06.365000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.366437 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Dec 13 14:29:06.373000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.375000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.366508 systemd[1]: Closed systemd-udevd-control.socket. Dec 13 14:29:06.382000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.368707 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Dec 13 14:29:06.368758 systemd[1]: Closed systemd-udevd-kernel.socket. Dec 13 14:29:06.371023 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Dec 13 14:29:06.371078 systemd[1]: Stopped dracut-pre-udev.service. Dec 13 14:29:06.373249 systemd[1]: dracut-cmdline.service: Deactivated successfully. Dec 13 14:29:06.373302 systemd[1]: Stopped dracut-cmdline.service. Dec 13 14:29:06.377906 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Dec 13 14:29:06.377964 systemd[1]: Stopped dracut-cmdline-ask.service. Dec 13 14:29:06.404000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.399877 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Dec 13 14:29:06.409000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.409000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.402250 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Dec 13 14:29:06.402340 systemd[1]: Stopped systemd-vconsole-setup.service. Dec 13 14:29:06.406680 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Dec 13 14:29:06.406771 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Dec 13 14:29:06.426347 kernel: hv_netvsc 7c1e521f-c45f-7c1e-521f-c45f7c1e521f eth0: Data path switched from VF: enP11242s1 Dec 13 14:29:06.440178 systemd[1]: network-cleanup.service: Deactivated successfully. Dec 13 14:29:06.444000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.440308 systemd[1]: Stopped network-cleanup.service. Dec 13 14:29:06.550508 systemd[1]: sysroot-boot.service: Deactivated successfully. Dec 13 14:29:06.550650 systemd[1]: Stopped sysroot-boot.service. Dec 13 14:29:06.557000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.557645 systemd[1]: Reached target initrd-switch-root.target. Dec 13 14:29:06.562378 systemd[1]: initrd-setup-root.service: Deactivated successfully. Dec 13 14:29:06.564996 systemd[1]: Stopped initrd-setup-root.service. Dec 13 14:29:06.568000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:06.569985 systemd[1]: Starting initrd-switch-root.service... Dec 13 14:29:06.581438 systemd[1]: Switching root. Dec 13 14:29:06.607271 systemd-journald[183]: Journal stopped Dec 13 14:29:28.292634 systemd-journald[183]: Received SIGTERM from PID 1 (systemd). Dec 13 14:29:28.292664 kernel: SELinux: Class mctp_socket not defined in policy. Dec 13 14:29:28.292678 kernel: SELinux: Class anon_inode not defined in policy. Dec 13 14:29:28.292687 kernel: SELinux: the above unknown classes and permissions will be allowed Dec 13 14:29:28.292698 kernel: SELinux: policy capability network_peer_controls=1 Dec 13 14:29:28.292706 kernel: SELinux: policy capability open_perms=1 Dec 13 14:29:28.292721 kernel: SELinux: policy capability extended_socket_class=1 Dec 13 14:29:28.292729 kernel: SELinux: policy capability always_check_network=0 Dec 13 14:29:28.292740 kernel: SELinux: policy capability cgroup_seclabel=1 Dec 13 14:29:28.292749 kernel: SELinux: policy capability nnp_nosuid_transition=1 Dec 13 14:29:28.292759 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Dec 13 14:29:28.292768 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Dec 13 14:29:28.292778 systemd[1]: Successfully loaded SELinux policy in 491.032ms. Dec 13 14:29:28.292789 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 50.873ms. Dec 13 14:29:28.292805 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Dec 13 14:29:28.292816 systemd[1]: Detected virtualization microsoft. Dec 13 14:29:28.292827 systemd[1]: Detected architecture x86-64. Dec 13 14:29:28.292835 systemd[1]: Detected first boot. Dec 13 14:29:28.292849 systemd[1]: Hostname set to . Dec 13 14:29:28.292859 systemd[1]: Initializing machine ID from random generator. Dec 13 14:29:28.292868 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Dec 13 14:29:28.292876 kernel: kauditd_printk_skb: 27 callbacks suppressed Dec 13 14:29:28.292885 kernel: audit: type=1400 audit(1734100153.452:89): avc: denied { associate } for pid=1036 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Dec 13 14:29:28.292895 kernel: audit: type=1300 audit(1734100153.452:89): arch=c000003e syscall=188 success=yes exit=0 a0=c0001058d2 a1=c00002ae58 a2=c000029100 a3=32 items=0 ppid=1019 pid=1036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:29:28.292907 kernel: audit: type=1327 audit(1734100153.452:89): proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Dec 13 14:29:28.292916 kernel: audit: type=1400 audit(1734100153.460:90): avc: denied { associate } for pid=1036 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Dec 13 14:29:28.292925 kernel: audit: type=1300 audit(1734100153.460:90): arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001059a9 a2=1ed a3=0 items=2 ppid=1019 pid=1036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:29:28.292933 kernel: audit: type=1307 audit(1734100153.460:90): cwd="/" Dec 13 14:29:28.292942 kernel: audit: type=1302 audit(1734100153.460:90): item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:29:28.292952 kernel: audit: type=1302 audit(1734100153.460:90): item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:29:28.292966 kernel: audit: type=1327 audit(1734100153.460:90): proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Dec 13 14:29:28.292977 systemd[1]: Populated /etc with preset unit settings. Dec 13 14:29:28.292987 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Dec 13 14:29:28.292996 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Dec 13 14:29:28.293006 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Dec 13 14:29:28.293017 kernel: audit: type=1334 audit(1734100167.729:91): prog-id=12 op=LOAD Dec 13 14:29:28.293026 kernel: audit: type=1334 audit(1734100167.729:92): prog-id=3 op=UNLOAD Dec 13 14:29:28.293037 kernel: audit: type=1334 audit(1734100167.735:93): prog-id=13 op=LOAD Dec 13 14:29:28.293049 kernel: audit: type=1334 audit(1734100167.746:94): prog-id=14 op=LOAD Dec 13 14:29:28.293059 kernel: audit: type=1334 audit(1734100167.746:95): prog-id=4 op=UNLOAD Dec 13 14:29:28.293072 kernel: audit: type=1334 audit(1734100167.746:96): prog-id=5 op=UNLOAD Dec 13 14:29:28.293085 systemd[1]: initrd-switch-root.service: Deactivated successfully. Dec 13 14:29:28.293094 kernel: audit: type=1131 audit(1734100167.751:97): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.293106 systemd[1]: Stopped initrd-switch-root.service. Dec 13 14:29:28.293117 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Dec 13 14:29:28.293131 kernel: audit: type=1334 audit(1734100167.784:98): prog-id=12 op=UNLOAD Dec 13 14:29:28.293142 systemd[1]: Created slice system-addon\x2dconfig.slice. Dec 13 14:29:28.293153 kernel: audit: type=1130 audit(1734100167.784:99): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.293165 kernel: audit: type=1131 audit(1734100167.784:100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.293175 systemd[1]: Created slice system-addon\x2drun.slice. Dec 13 14:29:28.293187 systemd[1]: Created slice system-getty.slice. Dec 13 14:29:28.293199 systemd[1]: Created slice system-modprobe.slice. Dec 13 14:29:28.293210 systemd[1]: Created slice system-serial\x2dgetty.slice. Dec 13 14:29:28.293223 systemd[1]: Created slice system-system\x2dcloudinit.slice. Dec 13 14:29:28.293235 systemd[1]: Created slice system-systemd\x2dfsck.slice. Dec 13 14:29:28.293247 systemd[1]: Created slice user.slice. Dec 13 14:29:28.293257 systemd[1]: Started systemd-ask-password-console.path. Dec 13 14:29:28.293270 systemd[1]: Started systemd-ask-password-wall.path. Dec 13 14:29:28.293279 systemd[1]: Set up automount boot.automount. Dec 13 14:29:28.293292 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Dec 13 14:29:28.293301 systemd[1]: Stopped target initrd-switch-root.target. Dec 13 14:29:28.293313 systemd[1]: Stopped target initrd-fs.target. Dec 13 14:29:28.293334 systemd[1]: Stopped target initrd-root-fs.target. Dec 13 14:29:28.293344 systemd[1]: Reached target integritysetup.target. Dec 13 14:29:28.293356 systemd[1]: Reached target remote-cryptsetup.target. Dec 13 14:29:28.293368 systemd[1]: Reached target remote-fs.target. Dec 13 14:29:28.293378 systemd[1]: Reached target slices.target. Dec 13 14:29:28.293390 systemd[1]: Reached target swap.target. Dec 13 14:29:28.293400 systemd[1]: Reached target torcx.target. Dec 13 14:29:28.293415 systemd[1]: Reached target veritysetup.target. Dec 13 14:29:28.293425 systemd[1]: Listening on systemd-coredump.socket. Dec 13 14:29:28.293437 systemd[1]: Listening on systemd-initctl.socket. Dec 13 14:29:28.293450 systemd[1]: Listening on systemd-networkd.socket. Dec 13 14:29:28.293461 systemd[1]: Listening on systemd-udevd-control.socket. Dec 13 14:29:28.293475 systemd[1]: Listening on systemd-udevd-kernel.socket. Dec 13 14:29:28.293485 systemd[1]: Listening on systemd-userdbd.socket. Dec 13 14:29:28.293497 systemd[1]: Mounting dev-hugepages.mount... Dec 13 14:29:28.293507 systemd[1]: Mounting dev-mqueue.mount... Dec 13 14:29:28.293520 systemd[1]: Mounting media.mount... Dec 13 14:29:28.293531 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Dec 13 14:29:28.293542 systemd[1]: Mounting sys-kernel-debug.mount... Dec 13 14:29:28.293555 systemd[1]: Mounting sys-kernel-tracing.mount... Dec 13 14:29:28.293565 systemd[1]: Mounting tmp.mount... Dec 13 14:29:28.293579 systemd[1]: Starting flatcar-tmpfiles.service... Dec 13 14:29:28.293589 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Dec 13 14:29:28.293602 systemd[1]: Starting kmod-static-nodes.service... Dec 13 14:29:28.293614 systemd[1]: Starting modprobe@configfs.service... Dec 13 14:29:28.293625 systemd[1]: Starting modprobe@dm_mod.service... Dec 13 14:29:28.293636 systemd[1]: Starting modprobe@drm.service... Dec 13 14:29:28.293647 systemd[1]: Starting modprobe@efi_pstore.service... Dec 13 14:29:28.293660 systemd[1]: Starting modprobe@fuse.service... Dec 13 14:29:28.293670 systemd[1]: Starting modprobe@loop.service... Dec 13 14:29:28.293684 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Dec 13 14:29:28.293698 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Dec 13 14:29:28.293708 systemd[1]: Stopped systemd-fsck-root.service. Dec 13 14:29:28.293721 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Dec 13 14:29:28.293731 systemd[1]: Stopped systemd-fsck-usr.service. Dec 13 14:29:28.293743 systemd[1]: Stopped systemd-journald.service. Dec 13 14:29:28.293753 systemd[1]: Starting systemd-journald.service... Dec 13 14:29:28.293765 systemd[1]: Starting systemd-modules-load.service... Dec 13 14:29:28.293776 kernel: loop: module loaded Dec 13 14:29:28.293789 systemd[1]: Starting systemd-network-generator.service... Dec 13 14:29:28.293802 systemd[1]: Starting systemd-remount-fs.service... Dec 13 14:29:28.293811 systemd[1]: Starting systemd-udev-trigger.service... Dec 13 14:29:28.293824 systemd[1]: verity-setup.service: Deactivated successfully. Dec 13 14:29:28.293834 systemd[1]: Stopped verity-setup.service. Dec 13 14:29:28.293847 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Dec 13 14:29:28.293863 systemd-journald[1117]: Journal started Dec 13 14:29:28.293908 systemd-journald[1117]: Runtime Journal (/run/log/journal/2b098b96fc034c1f8085403f9658b4c6) is 8.0M, max 159.0M, 151.0M free. Dec 13 14:29:09.168000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Dec 13 14:29:10.488000 audit[1]: AVC avc: denied { integrity } for pid=1 comm="systemd" lockdown_reason="/dev/mem,kmem,port" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Dec 13 14:29:10.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Dec 13 14:29:10.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Dec 13 14:29:10.525000 audit: BPF prog-id=10 op=LOAD Dec 13 14:29:10.525000 audit: BPF prog-id=10 op=UNLOAD Dec 13 14:29:10.525000 audit: BPF prog-id=11 op=LOAD Dec 13 14:29:10.525000 audit: BPF prog-id=11 op=UNLOAD Dec 13 14:29:13.452000 audit[1036]: AVC avc: denied { associate } for pid=1036 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Dec 13 14:29:13.452000 audit[1036]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001058d2 a1=c00002ae58 a2=c000029100 a3=32 items=0 ppid=1019 pid=1036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:29:13.452000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Dec 13 14:29:13.460000 audit[1036]: AVC avc: denied { associate } for pid=1036 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Dec 13 14:29:13.460000 audit[1036]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001059a9 a2=1ed a3=0 items=2 ppid=1019 pid=1036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:29:13.460000 audit: CWD cwd="/" Dec 13 14:29:13.460000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:29:13.460000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:29:13.460000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Dec 13 14:29:27.729000 audit: BPF prog-id=12 op=LOAD Dec 13 14:29:27.729000 audit: BPF prog-id=3 op=UNLOAD Dec 13 14:29:27.735000 audit: BPF prog-id=13 op=LOAD Dec 13 14:29:27.746000 audit: BPF prog-id=14 op=LOAD Dec 13 14:29:27.746000 audit: BPF prog-id=4 op=UNLOAD Dec 13 14:29:27.746000 audit: BPF prog-id=5 op=UNLOAD Dec 13 14:29:27.751000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:27.784000 audit: BPF prog-id=12 op=UNLOAD Dec 13 14:29:27.784000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:27.784000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.147000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.157000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.162000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.162000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.163000 audit: BPF prog-id=15 op=LOAD Dec 13 14:29:28.163000 audit: BPF prog-id=16 op=LOAD Dec 13 14:29:28.163000 audit: BPF prog-id=17 op=LOAD Dec 13 14:29:28.163000 audit: BPF prog-id=13 op=UNLOAD Dec 13 14:29:28.163000 audit: BPF prog-id=14 op=UNLOAD Dec 13 14:29:28.289000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Dec 13 14:29:28.289000 audit[1117]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7ffedf1f5480 a2=4000 a3=7ffedf1f551c items=0 ppid=1 pid=1117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:29:28.289000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Dec 13 14:29:28.291000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:13.389979 /usr/lib/systemd/system-generators/torcx-generator[1036]: time="2024-12-13T14:29:13Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.6 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.6 /var/lib/torcx/store]" Dec 13 14:29:27.727709 systemd[1]: Queued start job for default target multi-user.target. Dec 13 14:29:13.390426 /usr/lib/systemd/system-generators/torcx-generator[1036]: time="2024-12-13T14:29:13Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Dec 13 14:29:27.751780 systemd[1]: systemd-journald.service: Deactivated successfully. Dec 13 14:29:13.390448 /usr/lib/systemd/system-generators/torcx-generator[1036]: time="2024-12-13T14:29:13Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Dec 13 14:29:13.390486 /usr/lib/systemd/system-generators/torcx-generator[1036]: time="2024-12-13T14:29:13Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Dec 13 14:29:13.390498 /usr/lib/systemd/system-generators/torcx-generator[1036]: time="2024-12-13T14:29:13Z" level=debug msg="skipped missing lower profile" missing profile=oem Dec 13 14:29:13.390543 /usr/lib/systemd/system-generators/torcx-generator[1036]: time="2024-12-13T14:29:13Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Dec 13 14:29:13.390558 /usr/lib/systemd/system-generators/torcx-generator[1036]: time="2024-12-13T14:29:13Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Dec 13 14:29:13.390775 /usr/lib/systemd/system-generators/torcx-generator[1036]: time="2024-12-13T14:29:13Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Dec 13 14:29:13.390833 /usr/lib/systemd/system-generators/torcx-generator[1036]: time="2024-12-13T14:29:13Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Dec 13 14:29:13.390849 /usr/lib/systemd/system-generators/torcx-generator[1036]: time="2024-12-13T14:29:13Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Dec 13 14:29:13.419073 /usr/lib/systemd/system-generators/torcx-generator[1036]: time="2024-12-13T14:29:13Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Dec 13 14:29:13.419122 /usr/lib/systemd/system-generators/torcx-generator[1036]: time="2024-12-13T14:29:13Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Dec 13 14:29:13.419147 /usr/lib/systemd/system-generators/torcx-generator[1036]: time="2024-12-13T14:29:13Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.6: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.6 Dec 13 14:29:13.419172 /usr/lib/systemd/system-generators/torcx-generator[1036]: time="2024-12-13T14:29:13Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Dec 13 14:29:13.419192 /usr/lib/systemd/system-generators/torcx-generator[1036]: time="2024-12-13T14:29:13Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.6: no such file or directory" path=/var/lib/torcx/store/3510.3.6 Dec 13 14:29:13.419207 /usr/lib/systemd/system-generators/torcx-generator[1036]: time="2024-12-13T14:29:13Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Dec 13 14:29:26.146956 /usr/lib/systemd/system-generators/torcx-generator[1036]: time="2024-12-13T14:29:26Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Dec 13 14:29:26.147276 /usr/lib/systemd/system-generators/torcx-generator[1036]: time="2024-12-13T14:29:26Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Dec 13 14:29:26.147446 /usr/lib/systemd/system-generators/torcx-generator[1036]: time="2024-12-13T14:29:26Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Dec 13 14:29:26.147683 /usr/lib/systemd/system-generators/torcx-generator[1036]: time="2024-12-13T14:29:26Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Dec 13 14:29:26.147752 /usr/lib/systemd/system-generators/torcx-generator[1036]: time="2024-12-13T14:29:26Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Dec 13 14:29:26.147826 /usr/lib/systemd/system-generators/torcx-generator[1036]: time="2024-12-13T14:29:26Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Dec 13 14:29:28.306914 systemd[1]: Started systemd-journald.service. Dec 13 14:29:28.308000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.309267 systemd[1]: Mounted dev-hugepages.mount. Dec 13 14:29:28.312771 systemd[1]: Mounted dev-mqueue.mount. Dec 13 14:29:28.315058 systemd[1]: Mounted media.mount. Dec 13 14:29:28.317006 systemd[1]: Mounted sys-kernel-debug.mount. Dec 13 14:29:28.319292 systemd[1]: Mounted sys-kernel-tracing.mount. Dec 13 14:29:28.321632 systemd[1]: Mounted tmp.mount. Dec 13 14:29:28.323811 systemd[1]: Finished flatcar-tmpfiles.service. Dec 13 14:29:28.325000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.326407 systemd[1]: Finished kmod-static-nodes.service. Dec 13 14:29:28.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.328817 systemd[1]: modprobe@configfs.service: Deactivated successfully. Dec 13 14:29:28.328956 systemd[1]: Finished modprobe@configfs.service. Dec 13 14:29:28.331000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.331000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.331519 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Dec 13 14:29:28.331653 systemd[1]: Finished modprobe@dm_mod.service. Dec 13 14:29:28.333000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.333000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.334097 systemd[1]: modprobe@drm.service: Deactivated successfully. Dec 13 14:29:28.334230 systemd[1]: Finished modprobe@drm.service. Dec 13 14:29:28.336000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.336000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.336373 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Dec 13 14:29:28.336511 systemd[1]: Finished modprobe@efi_pstore.service. Dec 13 14:29:28.338000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.338000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.339168 systemd[1]: modprobe@loop.service: Deactivated successfully. Dec 13 14:29:28.341000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.341000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.339523 systemd[1]: Finished modprobe@loop.service. Dec 13 14:29:28.341813 systemd[1]: Finished systemd-network-generator.service. Dec 13 14:29:28.344000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.344574 systemd[1]: Finished systemd-remount-fs.service. Dec 13 14:29:28.346000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.347259 systemd[1]: Reached target network-pre.target. Dec 13 14:29:28.351212 systemd[1]: Mounting sys-kernel-config.mount... Dec 13 14:29:28.354695 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Dec 13 14:29:28.368341 kernel: fuse: init (API version 7.34) Dec 13 14:29:28.412090 systemd[1]: Starting systemd-hwdb-update.service... Dec 13 14:29:28.415745 systemd[1]: Starting systemd-journal-flush.service... Dec 13 14:29:28.417909 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Dec 13 14:29:28.419203 systemd[1]: Starting systemd-random-seed.service... Dec 13 14:29:28.421454 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Dec 13 14:29:28.422757 systemd[1]: Starting systemd-sysusers.service... Dec 13 14:29:28.426876 systemd[1]: modprobe@fuse.service: Deactivated successfully. Dec 13 14:29:28.427038 systemd[1]: Finished modprobe@fuse.service. Dec 13 14:29:28.429000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.429000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.430186 systemd[1]: Finished systemd-modules-load.service. Dec 13 14:29:28.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.432689 systemd[1]: Mounted sys-kernel-config.mount. Dec 13 14:29:28.436408 systemd[1]: Mounting sys-fs-fuse-connections.mount... Dec 13 14:29:28.440025 systemd[1]: Starting systemd-sysctl.service... Dec 13 14:29:28.445919 systemd[1]: Mounted sys-fs-fuse-connections.mount. Dec 13 14:29:28.460096 systemd[1]: Finished systemd-random-seed.service. Dec 13 14:29:28.462000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.462554 systemd[1]: Reached target first-boot-complete.target. Dec 13 14:29:28.488918 systemd-journald[1117]: Time spent on flushing to /var/log/journal/2b098b96fc034c1f8085403f9658b4c6 is 17.229ms for 1172 entries. Dec 13 14:29:28.488918 systemd-journald[1117]: System Journal (/var/log/journal/2b098b96fc034c1f8085403f9658b4c6) is 8.0M, max 2.6G, 2.6G free. Dec 13 14:29:28.593176 systemd-journald[1117]: Received client request to flush runtime journal. Dec 13 14:29:28.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.551000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.529561 systemd[1]: Finished systemd-udev-trigger.service. Dec 13 14:29:28.593580 udevadm[1160]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Dec 13 14:29:28.596000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:28.533960 systemd[1]: Starting systemd-udev-settle.service... Dec 13 14:29:28.549414 systemd[1]: Finished systemd-sysctl.service. Dec 13 14:29:28.594261 systemd[1]: Finished systemd-journal-flush.service. Dec 13 14:29:29.521780 systemd[1]: Finished systemd-sysusers.service. Dec 13 14:29:29.524000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:30.439314 systemd[1]: Finished systemd-hwdb-update.service. Dec 13 14:29:30.442000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:30.442000 audit: BPF prog-id=18 op=LOAD Dec 13 14:29:30.442000 audit: BPF prog-id=19 op=LOAD Dec 13 14:29:30.442000 audit: BPF prog-id=7 op=UNLOAD Dec 13 14:29:30.442000 audit: BPF prog-id=8 op=UNLOAD Dec 13 14:29:30.443717 systemd[1]: Starting systemd-udevd.service... Dec 13 14:29:30.462060 systemd-udevd[1162]: Using default interface naming scheme 'v252'. Dec 13 14:29:30.863081 systemd[1]: Started systemd-udevd.service. Dec 13 14:29:30.865000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:30.867000 audit: BPF prog-id=20 op=LOAD Dec 13 14:29:30.870584 systemd[1]: Starting systemd-networkd.service... Dec 13 14:29:30.907268 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Dec 13 14:29:30.979823 kernel: hv_utils: Registering HyperV Utility Driver Dec 13 14:29:30.979935 kernel: hv_vmbus: registering driver hv_utils Dec 13 14:29:30.992353 kernel: hv_vmbus: registering driver hyperv_fb Dec 13 14:29:30.993000 audit[1164]: AVC avc: denied { confidentiality } for pid=1164 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Dec 13 14:29:31.008462 kernel: hv_vmbus: registering driver hv_balloon Dec 13 14:29:31.008580 kernel: hv_utils: Heartbeat IC version 3.0 Dec 13 14:29:30.971098 kernel: hv_utils: TimeSync IC version 4.0 Dec 13 14:29:31.032813 kernel: hv_utils: Shutdown IC version 3.2 Dec 13 14:29:31.032854 systemd-journald[1117]: Time jumped backwards, rotating. Dec 13 14:29:31.032934 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Dec 13 14:29:31.032961 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Dec 13 14:29:31.032982 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Dec 13 14:29:31.033004 kernel: Console: switching to colour dummy device 80x25 Dec 13 14:29:31.033025 kernel: Console: switching to colour frame buffer device 128x48 Dec 13 14:29:31.033046 kernel: mousedev: PS/2 mouse device common for all mice Dec 13 14:29:30.993000 audit[1164]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=558e9e0ff3e0 a1=f884 a2=7f84dc6b9bc5 a3=5 items=12 ppid=1162 pid=1164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:29:30.993000 audit: CWD cwd="/" Dec 13 14:29:30.993000 audit: PATH item=0 name=(null) inode=235 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:29:30.993000 audit: PATH item=1 name=(null) inode=13295 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:29:30.993000 audit: PATH item=2 name=(null) inode=13295 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:29:30.993000 audit: PATH item=3 name=(null) inode=13296 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:29:30.993000 audit: PATH item=4 name=(null) inode=13295 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:29:30.993000 audit: PATH item=5 name=(null) inode=13297 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:29:30.993000 audit: PATH item=6 name=(null) inode=13295 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:29:30.993000 audit: PATH item=7 name=(null) inode=13298 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:29:30.993000 audit: PATH item=8 name=(null) inode=13295 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:29:30.993000 audit: PATH item=9 name=(null) inode=13299 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:29:30.993000 audit: PATH item=10 name=(null) inode=13295 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:29:30.993000 audit: PATH item=11 name=(null) inode=13300 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:29:30.993000 audit: PROCTITLE proctitle="(udev-worker)" Dec 13 14:29:31.022000 audit: BPF prog-id=21 op=LOAD Dec 13 14:29:31.022000 audit: BPF prog-id=22 op=LOAD Dec 13 14:29:31.022000 audit: BPF prog-id=23 op=LOAD Dec 13 14:29:31.025446 systemd[1]: Starting systemd-userdbd.service... Dec 13 14:29:31.087461 systemd[1]: Started systemd-userdbd.service. Dec 13 14:29:31.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:31.272773 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/sda6 scanned by (udev-worker) (1173) Dec 13 14:29:31.321567 kernel: KVM: vmx: using Hyper-V Enlightened VMCS Dec 13 14:29:31.332295 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Dec 13 14:29:31.409951 systemd[1]: Finished systemd-udev-settle.service. Dec 13 14:29:31.411000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:31.414236 systemd[1]: Starting lvm2-activation-early.service... Dec 13 14:29:31.562950 systemd-networkd[1168]: lo: Link UP Dec 13 14:29:31.562961 systemd-networkd[1168]: lo: Gained carrier Dec 13 14:29:31.563535 systemd-networkd[1168]: Enumeration completed Dec 13 14:29:31.563724 systemd[1]: Started systemd-networkd.service. Dec 13 14:29:31.565000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:31.568176 systemd[1]: Starting systemd-networkd-wait-online.service... Dec 13 14:29:31.630160 systemd-networkd[1168]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Dec 13 14:29:31.682570 kernel: mlx5_core 2bea:00:02.0 enP11242s1: Link up Dec 13 14:29:31.703600 kernel: hv_netvsc 7c1e521f-c45f-7c1e-521f-c45f7c1e521f eth0: Data path switched to VF: enP11242s1 Dec 13 14:29:31.704687 systemd-networkd[1168]: enP11242s1: Link UP Dec 13 14:29:31.704873 systemd-networkd[1168]: eth0: Link UP Dec 13 14:29:31.704880 systemd-networkd[1168]: eth0: Gained carrier Dec 13 14:29:31.707907 systemd-networkd[1168]: enP11242s1: Gained carrier Dec 13 14:29:31.725700 systemd-networkd[1168]: eth0: DHCPv4 address 10.200.8.24/24, gateway 10.200.8.1 acquired from 168.63.129.16 Dec 13 14:29:32.119283 lvm[1240]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Dec 13 14:29:32.148688 systemd[1]: Finished lvm2-activation-early.service. Dec 13 14:29:32.150000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:32.151516 systemd[1]: Reached target cryptsetup.target. Dec 13 14:29:32.155249 systemd[1]: Starting lvm2-activation.service... Dec 13 14:29:32.159174 lvm[1242]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Dec 13 14:29:32.185784 systemd[1]: Finished lvm2-activation.service. Dec 13 14:29:32.186000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:32.188647 systemd[1]: Reached target local-fs-pre.target. Dec 13 14:29:32.191120 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Dec 13 14:29:32.191170 systemd[1]: Reached target local-fs.target. Dec 13 14:29:32.193571 systemd[1]: Reached target machines.target. Dec 13 14:29:32.196999 systemd[1]: Starting ldconfig.service... Dec 13 14:29:32.199156 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Dec 13 14:29:32.199263 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Dec 13 14:29:32.200686 systemd[1]: Starting systemd-boot-update.service... Dec 13 14:29:32.204251 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Dec 13 14:29:32.208090 systemd[1]: Starting systemd-machine-id-commit.service... Dec 13 14:29:32.211881 systemd[1]: Starting systemd-sysext.service... Dec 13 14:29:32.277900 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1244 (bootctl) Dec 13 14:29:32.279377 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Dec 13 14:29:32.317159 systemd[1]: Unmounting usr-share-oem.mount... Dec 13 14:29:32.349058 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Dec 13 14:29:32.350087 systemd[1]: Finished systemd-machine-id-commit.service. Dec 13 14:29:32.351000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:32.369872 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Dec 13 14:29:32.369000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:32.388362 systemd[1]: usr-share-oem.mount: Deactivated successfully. Dec 13 14:29:32.388614 systemd[1]: Unmounted usr-share-oem.mount. Dec 13 14:29:32.435572 kernel: loop0: detected capacity change from 0 to 205544 Dec 13 14:29:32.477645 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Dec 13 14:29:32.493567 kernel: loop1: detected capacity change from 0 to 205544 Dec 13 14:29:32.497252 (sd-sysext)[1256]: Using extensions 'kubernetes'. Dec 13 14:29:32.497710 (sd-sysext)[1256]: Merged extensions into '/usr'. Dec 13 14:29:32.513342 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Dec 13 14:29:32.514915 systemd[1]: Mounting usr-share-oem.mount... Dec 13 14:29:32.516423 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Dec 13 14:29:32.520254 systemd[1]: Starting modprobe@dm_mod.service... Dec 13 14:29:32.522710 systemd[1]: Starting modprobe@efi_pstore.service... Dec 13 14:29:32.526754 systemd[1]: Starting modprobe@loop.service... Dec 13 14:29:32.528171 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Dec 13 14:29:32.528294 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Dec 13 14:29:32.528399 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Dec 13 14:29:32.529651 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Dec 13 14:29:32.529947 systemd[1]: Finished modprobe@dm_mod.service. Dec 13 14:29:32.529000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:32.530000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:32.531000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:32.531000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:32.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:32.532000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:32.531895 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Dec 13 14:29:32.532018 systemd[1]: Finished modprobe@efi_pstore.service. Dec 13 14:29:32.533436 systemd[1]: modprobe@loop.service: Deactivated successfully. Dec 13 14:29:32.533569 systemd[1]: Finished modprobe@loop.service. Dec 13 14:29:32.534440 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Dec 13 14:29:32.534610 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Dec 13 14:29:32.540563 systemd[1]: Mounted usr-share-oem.mount. Dec 13 14:29:32.544098 systemd[1]: Finished systemd-sysext.service. Dec 13 14:29:32.545000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:32.547967 systemd[1]: Starting ensure-sysext.service... Dec 13 14:29:32.551419 systemd[1]: Starting systemd-tmpfiles-setup.service... Dec 13 14:29:32.558437 systemd[1]: Reloading. Dec 13 14:29:32.608088 systemd-tmpfiles[1263]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Dec 13 14:29:32.632994 systemd-tmpfiles[1263]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Dec 13 14:29:32.635196 /usr/lib/systemd/system-generators/torcx-generator[1283]: time="2024-12-13T14:29:32Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.6 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.6 /var/lib/torcx/store]" Dec 13 14:29:32.635682 /usr/lib/systemd/system-generators/torcx-generator[1283]: time="2024-12-13T14:29:32Z" level=info msg="torcx already run" Dec 13 14:29:32.651082 systemd-tmpfiles[1263]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Dec 13 14:29:32.728708 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Dec 13 14:29:32.728728 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Dec 13 14:29:32.745073 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Dec 13 14:29:32.807000 audit: BPF prog-id=24 op=LOAD Dec 13 14:29:32.812578 kernel: kauditd_printk_skb: 76 callbacks suppressed Dec 13 14:29:32.812635 kernel: audit: type=1334 audit(1734100172.807:160): prog-id=24 op=LOAD Dec 13 14:29:32.814000 audit: BPF prog-id=25 op=LOAD Dec 13 14:29:32.819899 kernel: audit: type=1334 audit(1734100172.814:161): prog-id=25 op=LOAD Dec 13 14:29:32.814000 audit: BPF prog-id=18 op=UNLOAD Dec 13 14:29:32.823581 kernel: audit: type=1334 audit(1734100172.814:162): prog-id=18 op=UNLOAD Dec 13 14:29:32.814000 audit: BPF prog-id=19 op=UNLOAD Dec 13 14:29:32.827612 kernel: audit: type=1334 audit(1734100172.814:163): prog-id=19 op=UNLOAD Dec 13 14:29:32.822000 audit: BPF prog-id=26 op=LOAD Dec 13 14:29:32.831285 kernel: audit: type=1334 audit(1734100172.822:164): prog-id=26 op=LOAD Dec 13 14:29:32.831342 kernel: audit: type=1334 audit(1734100172.822:165): prog-id=21 op=UNLOAD Dec 13 14:29:32.822000 audit: BPF prog-id=21 op=UNLOAD Dec 13 14:29:32.835052 kernel: audit: type=1334 audit(1734100172.822:166): prog-id=27 op=LOAD Dec 13 14:29:32.822000 audit: BPF prog-id=27 op=LOAD Dec 13 14:29:32.822000 audit: BPF prog-id=28 op=LOAD Dec 13 14:29:32.841716 kernel: audit: type=1334 audit(1734100172.822:167): prog-id=28 op=LOAD Dec 13 14:29:32.841761 kernel: audit: type=1334 audit(1734100172.822:168): prog-id=22 op=UNLOAD Dec 13 14:29:32.822000 audit: BPF prog-id=22 op=UNLOAD Dec 13 14:29:32.822000 audit: BPF prog-id=23 op=UNLOAD Dec 13 14:29:32.848590 kernel: audit: type=1334 audit(1734100172.822:169): prog-id=23 op=UNLOAD Dec 13 14:29:32.826000 audit: BPF prog-id=29 op=LOAD Dec 13 14:29:32.826000 audit: BPF prog-id=20 op=UNLOAD Dec 13 14:29:32.836000 audit: BPF prog-id=30 op=LOAD Dec 13 14:29:32.836000 audit: BPF prog-id=15 op=UNLOAD Dec 13 14:29:32.847000 audit: BPF prog-id=31 op=LOAD Dec 13 14:29:32.847000 audit: BPF prog-id=32 op=LOAD Dec 13 14:29:32.847000 audit: BPF prog-id=16 op=UNLOAD Dec 13 14:29:32.847000 audit: BPF prog-id=17 op=UNLOAD Dec 13 14:29:32.862370 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Dec 13 14:29:32.862752 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Dec 13 14:29:32.864261 systemd[1]: Starting modprobe@dm_mod.service... Dec 13 14:29:32.867712 systemd[1]: Starting modprobe@efi_pstore.service... Dec 13 14:29:32.871344 systemd[1]: Starting modprobe@loop.service... Dec 13 14:29:32.872677 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Dec 13 14:29:32.872834 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Dec 13 14:29:32.872993 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Dec 13 14:29:32.874836 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Dec 13 14:29:32.875083 systemd[1]: Finished modprobe@dm_mod.service. Dec 13 14:29:32.876628 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Dec 13 14:29:32.876742 systemd[1]: Finished modprobe@efi_pstore.service. Dec 13 14:29:32.877413 systemd[1]: modprobe@loop.service: Deactivated successfully. Dec 13 14:29:32.877519 systemd[1]: Finished modprobe@loop.service. Dec 13 14:29:32.878733 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Dec 13 14:29:32.878824 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Dec 13 14:29:32.874000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:32.874000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:32.875000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:32.875000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:32.876000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:32.876000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:32.882797 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Dec 13 14:29:32.883099 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Dec 13 14:29:32.884797 systemd[1]: Starting modprobe@dm_mod.service... Dec 13 14:29:32.889374 systemd[1]: Starting modprobe@efi_pstore.service... Dec 13 14:29:32.892325 systemd[1]: Starting modprobe@loop.service... Dec 13 14:29:32.893401 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Dec 13 14:29:32.893618 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Dec 13 14:29:32.893807 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Dec 13 14:29:32.895511 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Dec 13 14:29:32.895773 systemd[1]: Finished modprobe@dm_mod.service. Dec 13 14:29:32.895000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:32.895000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:32.900085 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Dec 13 14:29:32.900229 systemd[1]: Finished modprobe@efi_pstore.service. Dec 13 14:29:32.899000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:32.900000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:32.900000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:32.900000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:32.902000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:32.901859 systemd[1]: modprobe@loop.service: Deactivated successfully. Dec 13 14:29:32.901972 systemd[1]: Finished modprobe@loop.service. Dec 13 14:29:32.903642 systemd[1]: Finished ensure-sysext.service. Dec 13 14:29:32.904978 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Dec 13 14:29:32.905208 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Dec 13 14:29:32.906420 systemd[1]: Starting modprobe@dm_mod.service... Dec 13 14:29:32.909584 systemd[1]: Starting modprobe@drm.service... Dec 13 14:29:32.911401 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Dec 13 14:29:32.911505 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Dec 13 14:29:32.911625 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Dec 13 14:29:32.911748 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Dec 13 14:29:32.913367 systemd[1]: modprobe@drm.service: Deactivated successfully. Dec 13 14:29:32.913522 systemd[1]: Finished modprobe@drm.service. Dec 13 14:29:32.914000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:32.914000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:32.916053 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Dec 13 14:29:32.916194 systemd[1]: Finished modprobe@dm_mod.service. Dec 13 14:29:32.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:32.916000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:32.918520 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Dec 13 14:29:33.193772 systemd-networkd[1168]: eth0: Gained IPv6LL Dec 13 14:29:33.199822 systemd[1]: Finished systemd-networkd-wait-online.service. Dec 13 14:29:33.201000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:33.621859 systemd-fsck[1252]: fsck.fat 4.2 (2021-01-31) Dec 13 14:29:33.621859 systemd-fsck[1252]: /dev/sda1: 789 files, 119291/258078 clusters Dec 13 14:29:33.626254 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Dec 13 14:29:33.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:33.631716 systemd[1]: Mounting boot.mount... Dec 13 14:29:33.646829 systemd[1]: Mounted boot.mount. Dec 13 14:29:33.661934 systemd[1]: Finished systemd-boot-update.service. Dec 13 14:29:33.663000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:33.965609 systemd[1]: Finished systemd-tmpfiles-setup.service. Dec 13 14:29:33.967000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:33.970452 systemd[1]: Starting audit-rules.service... Dec 13 14:29:33.974005 systemd[1]: Starting clean-ca-certificates.service... Dec 13 14:29:33.978025 systemd[1]: Starting systemd-journal-catalog-update.service... Dec 13 14:29:33.980000 audit: BPF prog-id=33 op=LOAD Dec 13 14:29:33.983072 systemd[1]: Starting systemd-resolved.service... Dec 13 14:29:33.987000 audit: BPF prog-id=34 op=LOAD Dec 13 14:29:33.989616 systemd[1]: Starting systemd-timesyncd.service... Dec 13 14:29:33.993413 systemd[1]: Starting systemd-update-utmp.service... Dec 13 14:29:34.017000 audit[1365]: SYSTEM_BOOT pid=1365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Dec 13 14:29:34.023912 systemd[1]: Finished systemd-update-utmp.service. Dec 13 14:29:34.025000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:34.131278 systemd[1]: Started systemd-timesyncd.service. Dec 13 14:29:34.132000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:34.134555 systemd[1]: Reached target time-set.target. Dec 13 14:29:34.148618 systemd[1]: Finished clean-ca-certificates.service. Dec 13 14:29:34.149000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:34.151410 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Dec 13 14:29:34.257356 systemd-resolved[1363]: Positive Trust Anchors: Dec 13 14:29:34.257373 systemd-resolved[1363]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Dec 13 14:29:34.257411 systemd-resolved[1363]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Dec 13 14:29:34.262320 systemd[1]: Finished systemd-journal-catalog-update.service. Dec 13 14:29:34.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:34.361554 systemd-timesyncd[1364]: Contacted time server 193.1.8.106:123 (0.flatcar.pool.ntp.org). Dec 13 14:29:34.361647 systemd-timesyncd[1364]: Initial clock synchronization to Fri 2024-12-13 14:29:34.361273 UTC. Dec 13 14:29:34.500887 systemd-resolved[1363]: Using system hostname 'ci-3510.3.6-a-f6adf0345d'. Dec 13 14:29:34.503333 systemd[1]: Started systemd-resolved.service. Dec 13 14:29:34.505000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:29:34.506514 systemd[1]: Reached target network.target. Dec 13 14:29:34.509206 systemd[1]: Reached target network-online.target. Dec 13 14:29:34.511929 systemd[1]: Reached target nss-lookup.target. Dec 13 14:29:34.577000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Dec 13 14:29:34.577000 audit[1381]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fffc51b4740 a2=420 a3=0 items=0 ppid=1360 pid=1381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:29:34.577000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Dec 13 14:29:34.579979 augenrules[1381]: No rules Dec 13 14:29:34.580990 systemd[1]: Finished audit-rules.service. Dec 13 14:29:45.466025 ldconfig[1243]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Dec 13 14:29:45.475750 systemd[1]: Finished ldconfig.service. Dec 13 14:29:45.479974 systemd[1]: Starting systemd-update-done.service... Dec 13 14:29:45.489140 systemd[1]: Finished systemd-update-done.service. Dec 13 14:29:45.491840 systemd[1]: Reached target sysinit.target. Dec 13 14:29:45.494213 systemd[1]: Started motdgen.path. Dec 13 14:29:45.496273 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Dec 13 14:29:45.499293 systemd[1]: Started logrotate.timer. Dec 13 14:29:45.501269 systemd[1]: Started mdadm.timer. Dec 13 14:29:45.502945 systemd[1]: Started systemd-tmpfiles-clean.timer. Dec 13 14:29:45.505188 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Dec 13 14:29:45.505228 systemd[1]: Reached target paths.target. Dec 13 14:29:45.507114 systemd[1]: Reached target timers.target. Dec 13 14:29:45.509412 systemd[1]: Listening on dbus.socket. Dec 13 14:29:45.512364 systemd[1]: Starting docker.socket... Dec 13 14:29:45.517156 systemd[1]: Listening on sshd.socket. Dec 13 14:29:45.519333 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Dec 13 14:29:45.519854 systemd[1]: Listening on docker.socket. Dec 13 14:29:45.521773 systemd[1]: Reached target sockets.target. Dec 13 14:29:45.523710 systemd[1]: Reached target basic.target. Dec 13 14:29:45.525658 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Dec 13 14:29:45.525689 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Dec 13 14:29:45.526872 systemd[1]: Starting containerd.service... Dec 13 14:29:45.530424 systemd[1]: Starting dbus.service... Dec 13 14:29:45.533960 systemd[1]: Starting enable-oem-cloudinit.service... Dec 13 14:29:45.537648 systemd[1]: Starting extend-filesystems.service... Dec 13 14:29:45.539984 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Dec 13 14:29:45.543598 systemd[1]: Starting kubelet.service... Dec 13 14:29:45.547421 systemd[1]: Starting motdgen.service... Dec 13 14:29:45.550765 systemd[1]: Started nvidia.service. Dec 13 14:29:45.554704 systemd[1]: Starting prepare-helm.service... Dec 13 14:29:45.560104 systemd[1]: Starting ssh-key-proc-cmdline.service... Dec 13 14:29:45.564786 systemd[1]: Starting sshd-keygen.service... Dec 13 14:29:45.570258 systemd[1]: Starting systemd-logind.service... Dec 13 14:29:45.572435 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Dec 13 14:29:45.572529 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Dec 13 14:29:45.573138 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Dec 13 14:29:45.574802 systemd[1]: Starting update-engine.service... Dec 13 14:29:45.578653 systemd[1]: Starting update-ssh-keys-after-ignition.service... Dec 13 14:29:45.587141 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Dec 13 14:29:45.588482 systemd[1]: Finished ssh-key-proc-cmdline.service. Dec 13 14:29:45.649027 systemd[1]: motdgen.service: Deactivated successfully. Dec 13 14:29:45.649283 systemd[1]: Finished motdgen.service. Dec 13 14:29:45.682272 extend-filesystems[1392]: Found loop1 Dec 13 14:29:45.684764 extend-filesystems[1392]: Found sda Dec 13 14:29:45.686826 extend-filesystems[1392]: Found sda1 Dec 13 14:29:45.689570 extend-filesystems[1392]: Found sda2 Dec 13 14:29:45.689570 extend-filesystems[1392]: Found sda3 Dec 13 14:29:45.689570 extend-filesystems[1392]: Found usr Dec 13 14:29:45.689570 extend-filesystems[1392]: Found sda4 Dec 13 14:29:45.689570 extend-filesystems[1392]: Found sda6 Dec 13 14:29:45.689570 extend-filesystems[1392]: Found sda7 Dec 13 14:29:45.689570 extend-filesystems[1392]: Found sda9 Dec 13 14:29:45.689570 extend-filesystems[1392]: Checking size of /dev/sda9 Dec 13 14:29:45.730835 jq[1407]: true Dec 13 14:29:45.696690 systemd-logind[1404]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Dec 13 14:29:45.731234 jq[1391]: false Dec 13 14:29:45.701854 systemd-logind[1404]: New seat seat0. Dec 13 14:29:45.716248 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Dec 13 14:29:45.716469 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Dec 13 14:29:45.734239 jq[1433]: true Dec 13 14:29:45.765528 env[1414]: time="2024-12-13T14:29:45.765475299Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Dec 13 14:29:45.768971 tar[1411]: linux-amd64/helm Dec 13 14:29:45.823874 extend-filesystems[1392]: Old size kept for /dev/sda9 Dec 13 14:29:45.834242 extend-filesystems[1392]: Found sr0 Dec 13 14:29:45.826165 systemd[1]: extend-filesystems.service: Deactivated successfully. Dec 13 14:29:45.826360 systemd[1]: Finished extend-filesystems.service. Dec 13 14:29:45.872390 env[1414]: time="2024-12-13T14:29:45.872252630Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Dec 13 14:29:45.872523 env[1414]: time="2024-12-13T14:29:45.872437429Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Dec 13 14:29:45.875046 env[1414]: time="2024-12-13T14:29:45.874807717Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.173-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Dec 13 14:29:45.875046 env[1414]: time="2024-12-13T14:29:45.874847417Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Dec 13 14:29:45.875192 env[1414]: time="2024-12-13T14:29:45.875135515Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Dec 13 14:29:45.875192 env[1414]: time="2024-12-13T14:29:45.875165115Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Dec 13 14:29:45.875270 env[1414]: time="2024-12-13T14:29:45.875192015Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Dec 13 14:29:45.875270 env[1414]: time="2024-12-13T14:29:45.875211815Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Dec 13 14:29:45.875346 env[1414]: time="2024-12-13T14:29:45.875320714Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Dec 13 14:29:45.875909 env[1414]: time="2024-12-13T14:29:45.875678312Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Dec 13 14:29:45.876143 env[1414]: time="2024-12-13T14:29:45.876020410Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Dec 13 14:29:45.876143 env[1414]: time="2024-12-13T14:29:45.876050010Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Dec 13 14:29:45.876143 env[1414]: time="2024-12-13T14:29:45.876120910Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Dec 13 14:29:45.876143 env[1414]: time="2024-12-13T14:29:45.876139010Z" level=info msg="metadata content store policy set" policy=shared Dec 13 14:29:45.898723 env[1414]: time="2024-12-13T14:29:45.898667190Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Dec 13 14:29:45.898886 env[1414]: time="2024-12-13T14:29:45.898731489Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Dec 13 14:29:45.898886 env[1414]: time="2024-12-13T14:29:45.898748689Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Dec 13 14:29:45.898886 env[1414]: time="2024-12-13T14:29:45.898794589Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Dec 13 14:29:45.898886 env[1414]: time="2024-12-13T14:29:45.898814489Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Dec 13 14:29:45.898886 env[1414]: time="2024-12-13T14:29:45.898832289Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Dec 13 14:29:45.898886 env[1414]: time="2024-12-13T14:29:45.898848089Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Dec 13 14:29:45.898886 env[1414]: time="2024-12-13T14:29:45.898865389Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Dec 13 14:29:45.898886 env[1414]: time="2024-12-13T14:29:45.898881889Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Dec 13 14:29:45.899140 env[1414]: time="2024-12-13T14:29:45.898899589Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Dec 13 14:29:45.899140 env[1414]: time="2024-12-13T14:29:45.898916988Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Dec 13 14:29:45.899140 env[1414]: time="2024-12-13T14:29:45.898934588Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Dec 13 14:29:45.899140 env[1414]: time="2024-12-13T14:29:45.899082088Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Dec 13 14:29:45.899344 env[1414]: time="2024-12-13T14:29:45.899181287Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Dec 13 14:29:45.899570 env[1414]: time="2024-12-13T14:29:45.899524785Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Dec 13 14:29:45.899639 env[1414]: time="2024-12-13T14:29:45.899596685Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Dec 13 14:29:45.899639 env[1414]: time="2024-12-13T14:29:45.899617585Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Dec 13 14:29:45.899718 env[1414]: time="2024-12-13T14:29:45.899675484Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Dec 13 14:29:45.899758 env[1414]: time="2024-12-13T14:29:45.899694184Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Dec 13 14:29:45.899758 env[1414]: time="2024-12-13T14:29:45.899749384Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Dec 13 14:29:45.899826 env[1414]: time="2024-12-13T14:29:45.899769884Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Dec 13 14:29:45.899826 env[1414]: time="2024-12-13T14:29:45.899788784Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Dec 13 14:29:45.899826 env[1414]: time="2024-12-13T14:29:45.899805984Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Dec 13 14:29:45.899922 env[1414]: time="2024-12-13T14:29:45.899823384Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Dec 13 14:29:45.899922 env[1414]: time="2024-12-13T14:29:45.899839184Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Dec 13 14:29:45.899922 env[1414]: time="2024-12-13T14:29:45.899861083Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Dec 13 14:29:45.900039 env[1414]: time="2024-12-13T14:29:45.900010383Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Dec 13 14:29:45.900039 env[1414]: time="2024-12-13T14:29:45.900034183Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Dec 13 14:29:45.900114 env[1414]: time="2024-12-13T14:29:45.900051582Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Dec 13 14:29:45.900114 env[1414]: time="2024-12-13T14:29:45.900069982Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Dec 13 14:29:45.900114 env[1414]: time="2024-12-13T14:29:45.900091782Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Dec 13 14:29:45.900114 env[1414]: time="2024-12-13T14:29:45.900109082Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Dec 13 14:29:45.900244 env[1414]: time="2024-12-13T14:29:45.900133682Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Dec 13 14:29:45.900244 env[1414]: time="2024-12-13T14:29:45.900176782Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Dec 13 14:29:45.900560 env[1414]: time="2024-12-13T14:29:45.900462880Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Dec 13 14:29:45.900560 env[1414]: time="2024-12-13T14:29:45.900559380Z" level=info msg="Connect containerd service" Dec 13 14:29:45.967738 env[1414]: time="2024-12-13T14:29:45.900611779Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Dec 13 14:29:45.967738 env[1414]: time="2024-12-13T14:29:45.901288776Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Dec 13 14:29:45.967738 env[1414]: time="2024-12-13T14:29:45.901710274Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Dec 13 14:29:45.967738 env[1414]: time="2024-12-13T14:29:45.901770773Z" level=info msg=serving... address=/run/containerd/containerd.sock Dec 13 14:29:45.967738 env[1414]: time="2024-12-13T14:29:45.904992556Z" level=info msg="containerd successfully booted in 0.140981s" Dec 13 14:29:45.967738 env[1414]: time="2024-12-13T14:29:45.905792152Z" level=info msg="Start subscribing containerd event" Dec 13 14:29:45.967738 env[1414]: time="2024-12-13T14:29:45.905845552Z" level=info msg="Start recovering state" Dec 13 14:29:45.967738 env[1414]: time="2024-12-13T14:29:45.905921051Z" level=info msg="Start event monitor" Dec 13 14:29:45.967738 env[1414]: time="2024-12-13T14:29:45.905946851Z" level=info msg="Start snapshots syncer" Dec 13 14:29:45.967738 env[1414]: time="2024-12-13T14:29:45.905959451Z" level=info msg="Start cni network conf syncer for default" Dec 13 14:29:45.967738 env[1414]: time="2024-12-13T14:29:45.905971851Z" level=info msg="Start streaming server" Dec 13 14:29:45.901912 systemd[1]: Started containerd.service. Dec 13 14:29:46.049994 dbus-daemon[1390]: [system] SELinux support is enabled Dec 13 14:29:46.050159 systemd[1]: Started dbus.service. Dec 13 14:29:46.054934 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Dec 13 14:29:46.054960 systemd[1]: Reached target system-config.target. Dec 13 14:29:46.057385 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Dec 13 14:29:46.057411 systemd[1]: Reached target user-config.target. Dec 13 14:29:46.064897 bash[1459]: Updated "/home/core/.ssh/authorized_keys" Dec 13 14:29:46.063311 systemd[1]: Finished update-ssh-keys-after-ignition.service. Dec 13 14:29:46.076218 systemd[1]: Started systemd-logind.service. Dec 13 14:29:46.078867 dbus-daemon[1390]: [system] Successfully activated service 'org.freedesktop.systemd1' Dec 13 14:29:46.124051 systemd[1]: nvidia.service: Deactivated successfully. Dec 13 14:29:46.836324 tar[1411]: linux-amd64/LICENSE Dec 13 14:29:46.836753 tar[1411]: linux-amd64/README.md Dec 13 14:29:46.843744 systemd[1]: Finished prepare-helm.service. Dec 13 14:29:46.969026 systemd[1]: Started kubelet.service. Dec 13 14:29:47.267225 update_engine[1405]: I1213 14:29:47.262997 1405 main.cc:92] Flatcar Update Engine starting Dec 13 14:29:47.375636 systemd[1]: Started update-engine.service. Dec 13 14:29:47.378259 update_engine[1405]: I1213 14:29:47.377130 1405 update_check_scheduler.cc:74] Next update check in 6m18s Dec 13 14:29:47.380930 systemd[1]: Started locksmithd.service. Dec 13 14:29:47.616112 kubelet[1499]: E1213 14:29:47.615989 1499 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Dec 13 14:29:47.618026 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Dec 13 14:29:47.618182 systemd[1]: kubelet.service: Failed with result 'exit-code'. Dec 13 14:29:47.618465 systemd[1]: kubelet.service: Consumed 1.104s CPU time. Dec 13 14:29:47.850994 sshd_keygen[1412]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Dec 13 14:29:47.871877 systemd[1]: Finished sshd-keygen.service. Dec 13 14:29:47.877402 systemd[1]: Starting issuegen.service... Dec 13 14:29:47.882453 systemd[1]: Started waagent.service. Dec 13 14:29:47.889850 systemd[1]: issuegen.service: Deactivated successfully. Dec 13 14:29:47.890063 systemd[1]: Finished issuegen.service. Dec 13 14:29:47.894489 systemd[1]: Starting systemd-user-sessions.service... Dec 13 14:29:47.905199 systemd[1]: Finished systemd-user-sessions.service. Dec 13 14:29:47.910295 systemd[1]: Started getty@tty1.service. Dec 13 14:29:47.922938 systemd[1]: Started serial-getty@ttyS0.service. Dec 13 14:29:47.925837 systemd[1]: Reached target getty.target. Dec 13 14:29:47.928308 systemd[1]: Reached target multi-user.target. Dec 13 14:29:47.932336 systemd[1]: Starting systemd-update-utmp-runlevel.service... Dec 13 14:29:47.942811 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Dec 13 14:29:47.943036 systemd[1]: Finished systemd-update-utmp-runlevel.service. Dec 13 14:29:47.946332 systemd[1]: Startup finished in 1.010s (firmware) + 56.930s (loader) + 947ms (kernel) + 20.495s (initrd) + 39.758s (userspace) = 1min 59.142s. Dec 13 14:29:48.603353 login[1519]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Dec 13 14:29:48.605035 login[1521]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Dec 13 14:29:48.658378 systemd[1]: Created slice user-500.slice. Dec 13 14:29:48.660021 systemd[1]: Starting user-runtime-dir@500.service... Dec 13 14:29:48.663665 systemd-logind[1404]: New session 2 of user core. Dec 13 14:29:48.666187 systemd-logind[1404]: New session 1 of user core. Dec 13 14:29:48.749229 systemd[1]: Finished user-runtime-dir@500.service. Dec 13 14:29:48.751263 systemd[1]: Starting user@500.service... Dec 13 14:29:48.758397 (systemd)[1527]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Dec 13 14:29:49.023383 systemd[1527]: Queued start job for default target default.target. Dec 13 14:29:49.024010 systemd[1527]: Reached target paths.target. Dec 13 14:29:49.024040 systemd[1527]: Reached target sockets.target. Dec 13 14:29:49.024056 systemd[1527]: Reached target timers.target. Dec 13 14:29:49.024071 systemd[1527]: Reached target basic.target. Dec 13 14:29:49.024128 systemd[1527]: Reached target default.target. Dec 13 14:29:49.024163 systemd[1527]: Startup finished in 258ms. Dec 13 14:29:49.024526 systemd[1]: Started user@500.service. Dec 13 14:29:49.025910 systemd[1]: Started session-1.scope. Dec 13 14:29:49.026746 systemd[1]: Started session-2.scope. Dec 13 14:29:49.639340 locksmithd[1505]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Dec 13 14:29:57.244452 waagent[1514]: 2024-12-13T14:29:57.244326Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Dec 13 14:29:57.257766 waagent[1514]: 2024-12-13T14:29:57.245851Z INFO Daemon Daemon OS: flatcar 3510.3.6 Dec 13 14:29:57.257766 waagent[1514]: 2024-12-13T14:29:57.246904Z INFO Daemon Daemon Python: 3.9.16 Dec 13 14:29:57.257766 waagent[1514]: 2024-12-13T14:29:57.248097Z INFO Daemon Daemon Run daemon Dec 13 14:29:57.257766 waagent[1514]: 2024-12-13T14:29:57.249010Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.6' Dec 13 14:29:57.262513 waagent[1514]: 2024-12-13T14:29:57.262376Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Dec 13 14:29:57.271375 waagent[1514]: 2024-12-13T14:29:57.271240Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Dec 13 14:29:57.276426 waagent[1514]: 2024-12-13T14:29:57.276329Z INFO Daemon Daemon cloud-init is enabled: False Dec 13 14:29:57.315984 waagent[1514]: 2024-12-13T14:29:57.276724Z INFO Daemon Daemon Using waagent for provisioning Dec 13 14:29:57.315984 waagent[1514]: 2024-12-13T14:29:57.277797Z INFO Daemon Daemon Activate resource disk Dec 13 14:29:57.315984 waagent[1514]: 2024-12-13T14:29:57.278656Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Dec 13 14:29:57.315984 waagent[1514]: 2024-12-13T14:29:57.286447Z INFO Daemon Daemon Found device: None Dec 13 14:29:57.315984 waagent[1514]: 2024-12-13T14:29:57.286982Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Dec 13 14:29:57.315984 waagent[1514]: 2024-12-13T14:29:57.287425Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Dec 13 14:29:57.315984 waagent[1514]: 2024-12-13T14:29:57.289252Z INFO Daemon Daemon Clean protocol and wireserver endpoint Dec 13 14:29:57.315984 waagent[1514]: 2024-12-13T14:29:57.290158Z INFO Daemon Daemon Running default provisioning handler Dec 13 14:29:57.315984 waagent[1514]: 2024-12-13T14:29:57.300361Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Dec 13 14:29:57.315984 waagent[1514]: 2024-12-13T14:29:57.303473Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Dec 13 14:29:57.315984 waagent[1514]: 2024-12-13T14:29:57.304511Z INFO Daemon Daemon cloud-init is enabled: False Dec 13 14:29:57.315984 waagent[1514]: 2024-12-13T14:29:57.305327Z INFO Daemon Daemon Copying ovf-env.xml Dec 13 14:29:57.502806 waagent[1514]: 2024-12-13T14:29:57.502494Z INFO Daemon Daemon Successfully mounted dvd Dec 13 14:29:57.642600 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Dec 13 14:29:57.644045 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Dec 13 14:29:57.644271 systemd[1]: Stopped kubelet.service. Dec 13 14:29:57.644326 systemd[1]: kubelet.service: Consumed 1.104s CPU time. Dec 13 14:29:57.646072 systemd[1]: Starting kubelet.service... Dec 13 14:29:57.768682 systemd[1]: Started kubelet.service. Dec 13 14:29:57.802251 waagent[1514]: 2024-12-13T14:29:57.802084Z INFO Daemon Daemon Detect protocol endpoint Dec 13 14:29:57.806098 waagent[1514]: 2024-12-13T14:29:57.805981Z INFO Daemon Daemon Clean protocol and wireserver endpoint Dec 13 14:29:57.810155 waagent[1514]: 2024-12-13T14:29:57.810047Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Dec 13 14:29:57.813861 waagent[1514]: 2024-12-13T14:29:57.813772Z INFO Daemon Daemon Test for route to 168.63.129.16 Dec 13 14:29:57.816998 waagent[1514]: 2024-12-13T14:29:57.816915Z INFO Daemon Daemon Route to 168.63.129.16 exists Dec 13 14:29:57.819918 waagent[1514]: 2024-12-13T14:29:57.819836Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Dec 13 14:29:58.293381 waagent[1514]: 2024-12-13T14:29:58.293306Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Dec 13 14:29:58.297624 waagent[1514]: 2024-12-13T14:29:58.297569Z INFO Daemon Daemon Wire protocol version:2012-11-30 Dec 13 14:29:58.300282 waagent[1514]: 2024-12-13T14:29:58.300217Z INFO Daemon Daemon Server preferred version:2015-04-05 Dec 13 14:29:58.314020 kubelet[1561]: E1213 14:29:58.313972 1561 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Dec 13 14:29:58.317252 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Dec 13 14:29:58.317409 systemd[1]: kubelet.service: Failed with result 'exit-code'. Dec 13 14:29:58.601500 waagent[1514]: 2024-12-13T14:29:58.601271Z INFO Daemon Daemon Initializing goal state during protocol detection Dec 13 14:29:58.610677 waagent[1514]: 2024-12-13T14:29:58.610583Z INFO Daemon Daemon Forcing an update of the goal state.. Dec 13 14:29:58.616329 waagent[1514]: 2024-12-13T14:29:58.611164Z INFO Daemon Daemon Fetching goal state [incarnation 1] Dec 13 14:29:58.714011 waagent[1514]: 2024-12-13T14:29:58.713868Z INFO Daemon Daemon Found private key matching thumbprint F5B48523D9751B751F44C59ED806E29576498436 Dec 13 14:29:58.719397 waagent[1514]: 2024-12-13T14:29:58.719295Z INFO Daemon Daemon Certificate with thumbprint 88D7B4B29E821ECBE2BBCAF9E4E430AF3EBCD0FA has no matching private key. Dec 13 14:29:58.724420 waagent[1514]: 2024-12-13T14:29:58.724321Z INFO Daemon Daemon Fetch goal state completed Dec 13 14:29:58.764891 waagent[1514]: 2024-12-13T14:29:58.764800Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: 1a6dc614-0adf-4414-8cb0-3322e8ba9fc6 New eTag: 12168815059219192175] Dec 13 14:29:58.770990 waagent[1514]: 2024-12-13T14:29:58.770891Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Dec 13 14:29:58.783989 waagent[1514]: 2024-12-13T14:29:58.783909Z INFO Daemon Daemon Starting provisioning Dec 13 14:29:58.786890 waagent[1514]: 2024-12-13T14:29:58.786790Z INFO Daemon Daemon Handle ovf-env.xml. Dec 13 14:29:58.789587 waagent[1514]: 2024-12-13T14:29:58.789487Z INFO Daemon Daemon Set hostname [ci-3510.3.6-a-f6adf0345d] Dec 13 14:29:58.833845 waagent[1514]: 2024-12-13T14:29:58.833693Z INFO Daemon Daemon Publish hostname [ci-3510.3.6-a-f6adf0345d] Dec 13 14:29:58.838422 waagent[1514]: 2024-12-13T14:29:58.838308Z INFO Daemon Daemon Examine /proc/net/route for primary interface Dec 13 14:29:58.842361 waagent[1514]: 2024-12-13T14:29:58.842275Z INFO Daemon Daemon Primary interface is [eth0] Dec 13 14:29:58.857524 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Dec 13 14:29:58.857805 systemd[1]: Stopped systemd-networkd-wait-online.service. Dec 13 14:29:58.857881 systemd[1]: Stopping systemd-networkd-wait-online.service... Dec 13 14:29:58.858235 systemd[1]: Stopping systemd-networkd.service... Dec 13 14:29:58.863599 systemd-networkd[1168]: eth0: DHCPv6 lease lost Dec 13 14:29:58.865050 systemd[1]: systemd-networkd.service: Deactivated successfully. Dec 13 14:29:58.865216 systemd[1]: Stopped systemd-networkd.service. Dec 13 14:29:58.867625 systemd[1]: Starting systemd-networkd.service... Dec 13 14:29:58.899963 systemd-networkd[1577]: enP11242s1: Link UP Dec 13 14:29:58.899974 systemd-networkd[1577]: enP11242s1: Gained carrier Dec 13 14:29:58.901380 systemd-networkd[1577]: eth0: Link UP Dec 13 14:29:58.901391 systemd-networkd[1577]: eth0: Gained carrier Dec 13 14:29:58.901947 systemd-networkd[1577]: lo: Link UP Dec 13 14:29:58.901957 systemd-networkd[1577]: lo: Gained carrier Dec 13 14:29:58.902279 systemd-networkd[1577]: eth0: Gained IPv6LL Dec 13 14:29:58.902580 systemd-networkd[1577]: Enumeration completed Dec 13 14:29:58.902716 systemd[1]: Started systemd-networkd.service. Dec 13 14:29:58.905587 waagent[1514]: 2024-12-13T14:29:58.905182Z INFO Daemon Daemon Create user account if not exists Dec 13 14:29:58.906229 systemd[1]: Starting systemd-networkd-wait-online.service... Dec 13 14:29:58.912281 waagent[1514]: 2024-12-13T14:29:58.910016Z INFO Daemon Daemon User core already exists, skip useradd Dec 13 14:29:58.912281 waagent[1514]: 2024-12-13T14:29:58.911175Z INFO Daemon Daemon Configure sudoer Dec 13 14:29:58.912815 waagent[1514]: 2024-12-13T14:29:58.912756Z INFO Daemon Daemon Configure sshd Dec 13 14:29:58.913657 waagent[1514]: 2024-12-13T14:29:58.913607Z INFO Daemon Daemon Deploy ssh public key. Dec 13 14:29:58.916520 systemd-networkd[1577]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Dec 13 14:29:58.955669 systemd-networkd[1577]: eth0: DHCPv4 address 10.200.8.24/24, gateway 10.200.8.1 acquired from 168.63.129.16 Dec 13 14:29:58.959210 systemd[1]: Finished systemd-networkd-wait-online.service. Dec 13 14:30:00.082122 waagent[1514]: 2024-12-13T14:30:00.082022Z INFO Daemon Daemon Provisioning complete Dec 13 14:30:00.098398 waagent[1514]: 2024-12-13T14:30:00.098311Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Dec 13 14:30:00.105774 waagent[1514]: 2024-12-13T14:30:00.098913Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Dec 13 14:30:00.105774 waagent[1514]: 2024-12-13T14:30:00.100724Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Dec 13 14:30:00.373164 waagent[1586]: 2024-12-13T14:30:00.372985Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Dec 13 14:30:00.373908 waagent[1586]: 2024-12-13T14:30:00.373838Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Dec 13 14:30:00.374054 waagent[1586]: 2024-12-13T14:30:00.374000Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Dec 13 14:30:00.384992 waagent[1586]: 2024-12-13T14:30:00.384908Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Dec 13 14:30:00.385172 waagent[1586]: 2024-12-13T14:30:00.385116Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Dec 13 14:30:00.447809 waagent[1586]: 2024-12-13T14:30:00.447682Z INFO ExtHandler ExtHandler Found private key matching thumbprint F5B48523D9751B751F44C59ED806E29576498436 Dec 13 14:30:00.448043 waagent[1586]: 2024-12-13T14:30:00.447979Z INFO ExtHandler ExtHandler Certificate with thumbprint 88D7B4B29E821ECBE2BBCAF9E4E430AF3EBCD0FA has no matching private key. Dec 13 14:30:00.448283 waagent[1586]: 2024-12-13T14:30:00.448234Z INFO ExtHandler ExtHandler Fetch goal state completed Dec 13 14:30:00.462005 waagent[1586]: 2024-12-13T14:30:00.461938Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: c674552f-7404-4913-a38d-e52b1baf7615 New eTag: 12168815059219192175] Dec 13 14:30:00.462566 waagent[1586]: 2024-12-13T14:30:00.462489Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Dec 13 14:30:00.561067 waagent[1586]: 2024-12-13T14:30:00.560904Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.6; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Dec 13 14:30:00.570380 waagent[1586]: 2024-12-13T14:30:00.570284Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1586 Dec 13 14:30:00.573894 waagent[1586]: 2024-12-13T14:30:00.573813Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.6', '', 'Flatcar Container Linux by Kinvolk'] Dec 13 14:30:00.575165 waagent[1586]: 2024-12-13T14:30:00.575100Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Dec 13 14:30:00.609276 waagent[1586]: 2024-12-13T14:30:00.609207Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Dec 13 14:30:00.609726 waagent[1586]: 2024-12-13T14:30:00.609659Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Dec 13 14:30:00.618285 waagent[1586]: 2024-12-13T14:30:00.618219Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Dec 13 14:30:00.618849 waagent[1586]: 2024-12-13T14:30:00.618782Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Dec 13 14:30:00.619962 waagent[1586]: 2024-12-13T14:30:00.619894Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Dec 13 14:30:00.621263 waagent[1586]: 2024-12-13T14:30:00.621202Z INFO ExtHandler ExtHandler Starting env monitor service. Dec 13 14:30:00.621876 waagent[1586]: 2024-12-13T14:30:00.621816Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Dec 13 14:30:00.622646 waagent[1586]: 2024-12-13T14:30:00.622591Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Dec 13 14:30:00.622789 waagent[1586]: 2024-12-13T14:30:00.622729Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Dec 13 14:30:00.623000 waagent[1586]: 2024-12-13T14:30:00.622951Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Dec 13 14:30:00.623149 waagent[1586]: 2024-12-13T14:30:00.623099Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Dec 13 14:30:00.623259 waagent[1586]: 2024-12-13T14:30:00.623174Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Dec 13 14:30:00.623985 waagent[1586]: 2024-12-13T14:30:00.623928Z INFO EnvHandler ExtHandler Configure routes Dec 13 14:30:00.624157 waagent[1586]: 2024-12-13T14:30:00.624090Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Dec 13 14:30:00.624369 waagent[1586]: 2024-12-13T14:30:00.624317Z INFO EnvHandler ExtHandler Gateway:None Dec 13 14:30:00.624936 waagent[1586]: 2024-12-13T14:30:00.624880Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Dec 13 14:30:00.625335 waagent[1586]: 2024-12-13T14:30:00.625281Z INFO EnvHandler ExtHandler Routes:None Dec 13 14:30:00.625829 waagent[1586]: 2024-12-13T14:30:00.625760Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Dec 13 14:30:00.625829 waagent[1586]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Dec 13 14:30:00.625829 waagent[1586]: eth0 00000000 0108C80A 0003 0 0 1024 00000000 0 0 0 Dec 13 14:30:00.625829 waagent[1586]: eth0 0008C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Dec 13 14:30:00.625829 waagent[1586]: eth0 0108C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Dec 13 14:30:00.625829 waagent[1586]: eth0 10813FA8 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Dec 13 14:30:00.625829 waagent[1586]: eth0 FEA9FEA9 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Dec 13 14:30:00.630111 waagent[1586]: 2024-12-13T14:30:00.630032Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Dec 13 14:30:00.630253 waagent[1586]: 2024-12-13T14:30:00.630171Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Dec 13 14:30:00.631118 waagent[1586]: 2024-12-13T14:30:00.631064Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Dec 13 14:30:00.642513 waagent[1586]: 2024-12-13T14:30:00.642444Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Dec 13 14:30:00.644160 waagent[1586]: 2024-12-13T14:30:00.644102Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Dec 13 14:30:00.645505 waagent[1586]: 2024-12-13T14:30:00.645443Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Dec 13 14:30:00.696009 waagent[1586]: 2024-12-13T14:30:00.695927Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Dec 13 14:30:00.715643 waagent[1586]: 2024-12-13T14:30:00.715492Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1577' Dec 13 14:30:00.924509 waagent[1586]: 2024-12-13T14:30:00.924296Z INFO MonitorHandler ExtHandler Network interfaces: Dec 13 14:30:00.924509 waagent[1586]: Executing ['ip', '-a', '-o', 'link']: Dec 13 14:30:00.924509 waagent[1586]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Dec 13 14:30:00.924509 waagent[1586]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 7c:1e:52:1f:c4:5f brd ff:ff:ff:ff:ff:ff Dec 13 14:30:00.924509 waagent[1586]: 3: enP11242s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 7c:1e:52:1f:c4:5f brd ff:ff:ff:ff:ff:ff\ altname enP11242p0s2 Dec 13 14:30:00.924509 waagent[1586]: Executing ['ip', '-4', '-a', '-o', 'address']: Dec 13 14:30:00.924509 waagent[1586]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Dec 13 14:30:00.924509 waagent[1586]: 2: eth0 inet 10.200.8.24/24 metric 1024 brd 10.200.8.255 scope global eth0\ valid_lft forever preferred_lft forever Dec 13 14:30:00.924509 waagent[1586]: Executing ['ip', '-6', '-a', '-o', 'address']: Dec 13 14:30:00.924509 waagent[1586]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Dec 13 14:30:00.924509 waagent[1586]: 2: eth0 inet6 fe80::7e1e:52ff:fe1f:c45f/64 scope link \ valid_lft forever preferred_lft forever Dec 13 14:30:00.960774 waagent[1586]: 2024-12-13T14:30:00.960632Z INFO EnvHandler ExtHandler Successfully added Azure fabric firewall rules Dec 13 14:30:00.965343 waagent[1586]: 2024-12-13T14:30:00.965254Z INFO EnvHandler ExtHandler Firewall rules: Dec 13 14:30:00.965343 waagent[1586]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Dec 13 14:30:00.965343 waagent[1586]: pkts bytes target prot opt in out source destination Dec 13 14:30:00.965343 waagent[1586]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Dec 13 14:30:00.965343 waagent[1586]: pkts bytes target prot opt in out source destination Dec 13 14:30:00.965343 waagent[1586]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Dec 13 14:30:00.965343 waagent[1586]: pkts bytes target prot opt in out source destination Dec 13 14:30:00.965343 waagent[1586]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Dec 13 14:30:00.965343 waagent[1586]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Dec 13 14:30:00.967170 waagent[1586]: 2024-12-13T14:30:00.967109Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Dec 13 14:30:01.083746 waagent[1586]: 2024-12-13T14:30:01.083665Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.12.0.2 -- exiting Dec 13 14:30:02.105879 waagent[1514]: 2024-12-13T14:30:02.105708Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Dec 13 14:30:02.116433 waagent[1514]: 2024-12-13T14:30:02.116363Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.12.0.2 to be the latest agent Dec 13 14:30:03.216103 waagent[1626]: 2024-12-13T14:30:03.215975Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.12.0.2) Dec 13 14:30:03.216883 waagent[1626]: 2024-12-13T14:30:03.216810Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.6 Dec 13 14:30:03.217032 waagent[1626]: 2024-12-13T14:30:03.216978Z INFO ExtHandler ExtHandler Python: 3.9.16 Dec 13 14:30:03.217183 waagent[1626]: 2024-12-13T14:30:03.217136Z INFO ExtHandler ExtHandler CPU Arch: x86_64 Dec 13 14:30:03.226993 waagent[1626]: 2024-12-13T14:30:03.226867Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.6; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; Arch: x86_64; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Dec 13 14:30:03.227422 waagent[1626]: 2024-12-13T14:30:03.227358Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Dec 13 14:30:03.227612 waagent[1626]: 2024-12-13T14:30:03.227560Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Dec 13 14:30:03.239809 waagent[1626]: 2024-12-13T14:30:03.239719Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Dec 13 14:30:03.252015 waagent[1626]: 2024-12-13T14:30:03.251944Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.159 Dec 13 14:30:03.253069 waagent[1626]: 2024-12-13T14:30:03.253001Z INFO ExtHandler Dec 13 14:30:03.253230 waagent[1626]: 2024-12-13T14:30:03.253175Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: 62cad9c2-38be-4fb8-bcf2-739d4d569bd8 eTag: 12168815059219192175 source: Fabric] Dec 13 14:30:03.253969 waagent[1626]: 2024-12-13T14:30:03.253913Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Dec 13 14:30:03.255059 waagent[1626]: 2024-12-13T14:30:03.255000Z INFO ExtHandler Dec 13 14:30:03.255193 waagent[1626]: 2024-12-13T14:30:03.255143Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Dec 13 14:30:03.262509 waagent[1626]: 2024-12-13T14:30:03.262445Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Dec 13 14:30:03.263039 waagent[1626]: 2024-12-13T14:30:03.262988Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Dec 13 14:30:03.285369 waagent[1626]: 2024-12-13T14:30:03.285295Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Dec 13 14:30:03.356252 waagent[1626]: 2024-12-13T14:30:03.356112Z INFO ExtHandler Downloaded certificate {'thumbprint': 'F5B48523D9751B751F44C59ED806E29576498436', 'hasPrivateKey': True} Dec 13 14:30:03.357285 waagent[1626]: 2024-12-13T14:30:03.357217Z INFO ExtHandler Downloaded certificate {'thumbprint': '88D7B4B29E821ECBE2BBCAF9E4E430AF3EBCD0FA', 'hasPrivateKey': False} Dec 13 14:30:03.358340 waagent[1626]: 2024-12-13T14:30:03.358274Z INFO ExtHandler Fetch goal state completed Dec 13 14:30:03.381538 waagent[1626]: 2024-12-13T14:30:03.381413Z INFO ExtHandler ExtHandler OpenSSL version: OpenSSL 3.0.15 3 Sep 2024 (Library: OpenSSL 3.0.15 3 Sep 2024) Dec 13 14:30:03.394044 waagent[1626]: 2024-12-13T14:30:03.393929Z INFO ExtHandler ExtHandler WALinuxAgent-2.12.0.2 running as process 1626 Dec 13 14:30:03.397180 waagent[1626]: 2024-12-13T14:30:03.397103Z INFO ExtHandler ExtHandler [CGI] Cgroup monitoring is not supported on ['flatcar', '3510.3.6', '', 'Flatcar Container Linux by Kinvolk'] Dec 13 14:30:03.398242 waagent[1626]: 2024-12-13T14:30:03.398177Z INFO ExtHandler ExtHandler [CGI] Agent will reset the quotas in case distro: ['flatcar', '3510.3.6', '', 'Flatcar Container Linux by Kinvolk'] went from supported to unsupported Dec 13 14:30:03.398553 waagent[1626]: 2024-12-13T14:30:03.398488Z INFO ExtHandler ExtHandler [CGI] Agent cgroups enabled: False Dec 13 14:30:03.400515 waagent[1626]: 2024-12-13T14:30:03.400455Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Dec 13 14:30:03.406680 waagent[1626]: 2024-12-13T14:30:03.406612Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Dec 13 14:30:03.407097 waagent[1626]: 2024-12-13T14:30:03.407034Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Dec 13 14:30:03.416029 waagent[1626]: 2024-12-13T14:30:03.415963Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Dec 13 14:30:03.416604 waagent[1626]: 2024-12-13T14:30:03.416525Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Dec 13 14:30:03.483227 waagent[1626]: 2024-12-13T14:30:03.483072Z INFO ExtHandler ExtHandler Firewall rule to allow DNS TCP request to wireserver for a non root user unavailable. Setting it now. Dec 13 14:30:03.486852 waagent[1626]: 2024-12-13T14:30:03.486736Z INFO ExtHandler ExtHandler Succesfully added firewall rule to allow non root users to do a DNS TCP request to wireserver Dec 13 14:30:03.487976 waagent[1626]: 2024-12-13T14:30:03.487898Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: 1. configuration enabled [True], 2. cgroups v1 enabled [False] OR cgroups v2 is in use and v2 resource limiting configuration enabled [False], 3. python supported: [True] Dec 13 14:30:03.489600 waagent[1626]: 2024-12-13T14:30:03.489508Z INFO ExtHandler ExtHandler Starting env monitor service. Dec 13 14:30:03.490509 waagent[1626]: 2024-12-13T14:30:03.490453Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Dec 13 14:30:03.490684 waagent[1626]: 2024-12-13T14:30:03.490629Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Dec 13 14:30:03.490927 waagent[1626]: 2024-12-13T14:30:03.490877Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Dec 13 14:30:03.491176 waagent[1626]: 2024-12-13T14:30:03.491123Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Dec 13 14:30:03.491808 waagent[1626]: 2024-12-13T14:30:03.491749Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Dec 13 14:30:03.492046 waagent[1626]: 2024-12-13T14:30:03.491997Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Dec 13 14:30:03.492814 waagent[1626]: 2024-12-13T14:30:03.492754Z INFO EnvHandler ExtHandler Configure routes Dec 13 14:30:03.493176 waagent[1626]: 2024-12-13T14:30:03.493119Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Dec 13 14:30:03.493440 waagent[1626]: 2024-12-13T14:30:03.493383Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Dec 13 14:30:03.493440 waagent[1626]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Dec 13 14:30:03.493440 waagent[1626]: eth0 00000000 0108C80A 0003 0 0 1024 00000000 0 0 0 Dec 13 14:30:03.493440 waagent[1626]: eth0 0008C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Dec 13 14:30:03.493440 waagent[1626]: eth0 0108C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Dec 13 14:30:03.493440 waagent[1626]: eth0 10813FA8 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Dec 13 14:30:03.493440 waagent[1626]: eth0 FEA9FEA9 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Dec 13 14:30:03.493723 waagent[1626]: 2024-12-13T14:30:03.493669Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Dec 13 14:30:03.493976 waagent[1626]: 2024-12-13T14:30:03.493926Z INFO EnvHandler ExtHandler Gateway:None Dec 13 14:30:03.497374 waagent[1626]: 2024-12-13T14:30:03.497161Z INFO EnvHandler ExtHandler Routes:None Dec 13 14:30:03.499125 waagent[1626]: 2024-12-13T14:30:03.498777Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Dec 13 14:30:03.499529 waagent[1626]: 2024-12-13T14:30:03.499458Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Dec 13 14:30:03.506860 waagent[1626]: 2024-12-13T14:30:03.506649Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Dec 13 14:30:03.527707 waagent[1626]: 2024-12-13T14:30:03.527627Z INFO MonitorHandler ExtHandler Network interfaces: Dec 13 14:30:03.527707 waagent[1626]: Executing ['ip', '-a', '-o', 'link']: Dec 13 14:30:03.527707 waagent[1626]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Dec 13 14:30:03.527707 waagent[1626]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 7c:1e:52:1f:c4:5f brd ff:ff:ff:ff:ff:ff Dec 13 14:30:03.527707 waagent[1626]: 3: enP11242s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 7c:1e:52:1f:c4:5f brd ff:ff:ff:ff:ff:ff\ altname enP11242p0s2 Dec 13 14:30:03.527707 waagent[1626]: Executing ['ip', '-4', '-a', '-o', 'address']: Dec 13 14:30:03.527707 waagent[1626]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Dec 13 14:30:03.527707 waagent[1626]: 2: eth0 inet 10.200.8.24/24 metric 1024 brd 10.200.8.255 scope global eth0\ valid_lft forever preferred_lft forever Dec 13 14:30:03.527707 waagent[1626]: Executing ['ip', '-6', '-a', '-o', 'address']: Dec 13 14:30:03.527707 waagent[1626]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Dec 13 14:30:03.527707 waagent[1626]: 2: eth0 inet6 fe80::7e1e:52ff:fe1f:c45f/64 scope link \ valid_lft forever preferred_lft forever Dec 13 14:30:03.530411 waagent[1626]: 2024-12-13T14:30:03.530343Z INFO ExtHandler ExtHandler Downloading agent manifest Dec 13 14:30:03.577721 waagent[1626]: 2024-12-13T14:30:03.577638Z INFO ExtHandler ExtHandler Dec 13 14:30:03.580161 waagent[1626]: 2024-12-13T14:30:03.580032Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: 84a8f1b1-f5e6-4c4b-bdff-a482e8f5b3ca correlation 8d210125-fc5d-47a0-ac50-9ac213ad5c9e created: 2024-12-13T14:27:39.510551Z] Dec 13 14:30:03.585147 waagent[1626]: 2024-12-13T14:30:03.585059Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Dec 13 14:30:03.589966 waagent[1626]: 2024-12-13T14:30:03.589863Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 12 ms] Dec 13 14:30:03.615110 waagent[1626]: 2024-12-13T14:30:03.615035Z INFO EnvHandler ExtHandler Current Firewall rules: Dec 13 14:30:03.615110 waagent[1626]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Dec 13 14:30:03.615110 waagent[1626]: pkts bytes target prot opt in out source destination Dec 13 14:30:03.615110 waagent[1626]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Dec 13 14:30:03.615110 waagent[1626]: pkts bytes target prot opt in out source destination Dec 13 14:30:03.615110 waagent[1626]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Dec 13 14:30:03.615110 waagent[1626]: pkts bytes target prot opt in out source destination Dec 13 14:30:03.615110 waagent[1626]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Dec 13 14:30:03.615110 waagent[1626]: 148 19548 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Dec 13 14:30:03.615110 waagent[1626]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Dec 13 14:30:03.622151 waagent[1626]: 2024-12-13T14:30:03.622077Z INFO ExtHandler ExtHandler Looking for existing remote access users. Dec 13 14:30:03.638124 waagent[1626]: 2024-12-13T14:30:03.638024Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.12.0.2 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: 6529BFE9-95E6-4A34-B086-0722C1625798;DroppedPackets: 0;UpdateGSErrors: 0;AutoUpdate: 1;UpdateMode: SelfUpdate;] Dec 13 14:30:08.467280 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Dec 13 14:30:08.467639 systemd[1]: Stopped kubelet.service. Dec 13 14:30:08.469762 systemd[1]: Starting kubelet.service... Dec 13 14:30:08.557204 systemd[1]: Started kubelet.service. Dec 13 14:30:09.146365 kubelet[1670]: E1213 14:30:09.146308 1670 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Dec 13 14:30:09.148129 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Dec 13 14:30:09.148290 systemd[1]: kubelet.service: Failed with result 'exit-code'. Dec 13 14:30:19.133188 kernel: hv_balloon: Max. dynamic memory size: 8192 MB Dec 13 14:30:19.217357 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Dec 13 14:30:19.217723 systemd[1]: Stopped kubelet.service. Dec 13 14:30:19.219767 systemd[1]: Starting kubelet.service... Dec 13 14:30:19.301256 systemd[1]: Started kubelet.service. Dec 13 14:30:19.884552 kubelet[1679]: E1213 14:30:19.884481 1679 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Dec 13 14:30:19.886042 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Dec 13 14:30:19.886155 systemd[1]: kubelet.service: Failed with result 'exit-code'. Dec 13 14:30:29.967304 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Dec 13 14:30:29.967676 systemd[1]: Stopped kubelet.service. Dec 13 14:30:29.969724 systemd[1]: Starting kubelet.service... Dec 13 14:30:30.279440 systemd[1]: Started kubelet.service. Dec 13 14:30:30.876154 kubelet[1688]: E1213 14:30:30.876100 1688 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Dec 13 14:30:30.877732 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Dec 13 14:30:30.877893 systemd[1]: kubelet.service: Failed with result 'exit-code'. Dec 13 14:30:32.769819 update_engine[1405]: I1213 14:30:32.769732 1405 update_attempter.cc:509] Updating boot flags... Dec 13 14:30:40.967323 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 5. Dec 13 14:30:40.967708 systemd[1]: Stopped kubelet.service. Dec 13 14:30:40.969688 systemd[1]: Starting kubelet.service... Dec 13 14:30:44.214397 systemd[1]: Started kubelet.service. Dec 13 14:30:44.250703 kubelet[1763]: E1213 14:30:44.250653 1763 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Dec 13 14:30:44.252478 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Dec 13 14:30:44.252634 systemd[1]: kubelet.service: Failed with result 'exit-code'. Dec 13 14:30:47.080148 systemd[1]: Created slice system-sshd.slice. Dec 13 14:30:47.082485 systemd[1]: Started sshd@0-10.200.8.24:22-10.200.16.10:34680.service. Dec 13 14:30:47.841813 sshd[1769]: Accepted publickey for core from 10.200.16.10 port 34680 ssh2: RSA SHA256:VL8LvbxVNxa7jmY6OervfMBnEuOtBvTKJ3L6x/+vjOM Dec 13 14:30:47.843534 sshd[1769]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 14:30:47.848719 systemd-logind[1404]: New session 3 of user core. Dec 13 14:30:47.849363 systemd[1]: Started session-3.scope. Dec 13 14:30:48.457203 systemd[1]: Started sshd@1-10.200.8.24:22-10.200.16.10:34688.service. Dec 13 14:30:49.163127 sshd[1774]: Accepted publickey for core from 10.200.16.10 port 34688 ssh2: RSA SHA256:VL8LvbxVNxa7jmY6OervfMBnEuOtBvTKJ3L6x/+vjOM Dec 13 14:30:49.164860 sshd[1774]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 14:30:49.170479 systemd[1]: Started session-4.scope. Dec 13 14:30:49.171121 systemd-logind[1404]: New session 4 of user core. Dec 13 14:30:49.669429 sshd[1774]: pam_unix(sshd:session): session closed for user core Dec 13 14:30:49.672873 systemd[1]: sshd@1-10.200.8.24:22-10.200.16.10:34688.service: Deactivated successfully. Dec 13 14:30:49.673925 systemd[1]: session-4.scope: Deactivated successfully. Dec 13 14:30:49.674712 systemd-logind[1404]: Session 4 logged out. Waiting for processes to exit. Dec 13 14:30:49.675636 systemd-logind[1404]: Removed session 4. Dec 13 14:30:49.788937 systemd[1]: Started sshd@2-10.200.8.24:22-10.200.16.10:47580.service. Dec 13 14:30:50.496602 sshd[1780]: Accepted publickey for core from 10.200.16.10 port 47580 ssh2: RSA SHA256:VL8LvbxVNxa7jmY6OervfMBnEuOtBvTKJ3L6x/+vjOM Dec 13 14:30:50.498271 sshd[1780]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 14:30:50.504002 systemd[1]: Started session-5.scope. Dec 13 14:30:50.504746 systemd-logind[1404]: New session 5 of user core. Dec 13 14:30:50.992898 sshd[1780]: pam_unix(sshd:session): session closed for user core Dec 13 14:30:50.995772 systemd[1]: sshd@2-10.200.8.24:22-10.200.16.10:47580.service: Deactivated successfully. Dec 13 14:30:50.996630 systemd[1]: session-5.scope: Deactivated successfully. Dec 13 14:30:50.997255 systemd-logind[1404]: Session 5 logged out. Waiting for processes to exit. Dec 13 14:30:50.997988 systemd-logind[1404]: Removed session 5. Dec 13 14:30:51.111990 systemd[1]: Started sshd@3-10.200.8.24:22-10.200.16.10:47588.service. Dec 13 14:30:51.820124 sshd[1786]: Accepted publickey for core from 10.200.16.10 port 47588 ssh2: RSA SHA256:VL8LvbxVNxa7jmY6OervfMBnEuOtBvTKJ3L6x/+vjOM Dec 13 14:30:51.821845 sshd[1786]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 14:30:51.827566 systemd[1]: Started session-6.scope. Dec 13 14:30:51.828306 systemd-logind[1404]: New session 6 of user core. Dec 13 14:30:52.322852 sshd[1786]: pam_unix(sshd:session): session closed for user core Dec 13 14:30:52.326342 systemd[1]: sshd@3-10.200.8.24:22-10.200.16.10:47588.service: Deactivated successfully. Dec 13 14:30:52.327379 systemd[1]: session-6.scope: Deactivated successfully. Dec 13 14:30:52.328123 systemd-logind[1404]: Session 6 logged out. Waiting for processes to exit. Dec 13 14:30:52.328916 systemd-logind[1404]: Removed session 6. Dec 13 14:30:52.441893 systemd[1]: Started sshd@4-10.200.8.24:22-10.200.16.10:47590.service. Dec 13 14:30:53.149634 sshd[1792]: Accepted publickey for core from 10.200.16.10 port 47590 ssh2: RSA SHA256:VL8LvbxVNxa7jmY6OervfMBnEuOtBvTKJ3L6x/+vjOM Dec 13 14:30:53.151368 sshd[1792]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 14:30:53.156688 systemd[1]: Started session-7.scope. Dec 13 14:30:53.157155 systemd-logind[1404]: New session 7 of user core. Dec 13 14:30:53.645328 sudo[1795]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Dec 13 14:30:53.645656 sudo[1795]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Dec 13 14:30:53.655774 dbus-daemon[1390]: \xd0-\x98\u0012pU: received setenforce notice (enforcing=310293312) Dec 13 14:30:53.657728 sudo[1795]: pam_unix(sudo:session): session closed for user root Dec 13 14:30:53.777751 sshd[1792]: pam_unix(sshd:session): session closed for user core Dec 13 14:30:53.781611 systemd[1]: sshd@4-10.200.8.24:22-10.200.16.10:47590.service: Deactivated successfully. Dec 13 14:30:53.782754 systemd[1]: session-7.scope: Deactivated successfully. Dec 13 14:30:53.783629 systemd-logind[1404]: Session 7 logged out. Waiting for processes to exit. Dec 13 14:30:53.784495 systemd-logind[1404]: Removed session 7. Dec 13 14:30:53.897109 systemd[1]: Started sshd@5-10.200.8.24:22-10.200.16.10:47598.service. Dec 13 14:30:54.467433 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 6. Dec 13 14:30:54.467807 systemd[1]: Stopped kubelet.service. Dec 13 14:30:54.469838 systemd[1]: Starting kubelet.service... Dec 13 14:30:54.555301 systemd[1]: Started kubelet.service. Dec 13 14:30:54.596280 kubelet[1805]: E1213 14:30:54.596222 1805 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Dec 13 14:30:54.597839 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Dec 13 14:30:54.598000 systemd[1]: kubelet.service: Failed with result 'exit-code'. Dec 13 14:30:54.605078 sshd[1799]: Accepted publickey for core from 10.200.16.10 port 47598 ssh2: RSA SHA256:VL8LvbxVNxa7jmY6OervfMBnEuOtBvTKJ3L6x/+vjOM Dec 13 14:30:54.606648 sshd[1799]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 14:30:54.611875 systemd[1]: Started session-8.scope. Dec 13 14:30:54.612345 systemd-logind[1404]: New session 8 of user core. Dec 13 14:30:54.991408 sudo[1812]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Dec 13 14:30:54.991723 sudo[1812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Dec 13 14:30:54.994667 sudo[1812]: pam_unix(sudo:session): session closed for user root Dec 13 14:30:54.999828 sudo[1811]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Dec 13 14:30:55.000120 sudo[1811]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Dec 13 14:30:55.010216 systemd[1]: Stopping audit-rules.service... Dec 13 14:30:55.010000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Dec 13 14:30:55.012020 auditctl[1815]: No rules Dec 13 14:30:55.014791 kernel: kauditd_printk_skb: 40 callbacks suppressed Dec 13 14:30:55.014864 kernel: audit: type=1305 audit(1734100255.010:208): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Dec 13 14:30:55.012469 systemd[1]: audit-rules.service: Deactivated successfully. Dec 13 14:30:55.012661 systemd[1]: Stopped audit-rules.service. Dec 13 14:30:55.015639 systemd[1]: Starting audit-rules.service... Dec 13 14:30:55.010000 audit[1815]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe27b1c340 a2=420 a3=0 items=0 ppid=1 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:30:55.039288 augenrules[1832]: No rules Dec 13 14:30:55.010000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Dec 13 14:30:55.041387 sudo[1811]: pam_unix(sudo:session): session closed for user root Dec 13 14:30:55.040217 systemd[1]: Finished audit-rules.service. Dec 13 14:30:55.044841 kernel: audit: type=1300 audit(1734100255.010:208): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe27b1c340 a2=420 a3=0 items=0 ppid=1 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:30:55.044934 kernel: audit: type=1327 audit(1734100255.010:208): proctitle=2F7362696E2F617564697463746C002D44 Dec 13 14:30:55.044959 kernel: audit: type=1131 audit(1734100255.010:209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:30:55.010000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:30:55.035000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:30:55.065063 kernel: audit: type=1130 audit(1734100255.035:210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:30:55.065589 kernel: audit: type=1106 audit(1734100255.039:211): pid=1811 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Dec 13 14:30:55.039000 audit[1811]: USER_END pid=1811 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Dec 13 14:30:55.039000 audit[1811]: CRED_DISP pid=1811 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Dec 13 14:30:55.078566 kernel: audit: type=1104 audit(1734100255.039:212): pid=1811 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Dec 13 14:30:55.167405 sshd[1799]: pam_unix(sshd:session): session closed for user core Dec 13 14:30:55.167000 audit[1799]: USER_END pid=1799 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:30:55.170908 systemd[1]: sshd@5-10.200.8.24:22-10.200.16.10:47598.service: Deactivated successfully. Dec 13 14:30:55.171663 systemd[1]: session-8.scope: Deactivated successfully. Dec 13 14:30:55.172925 systemd-logind[1404]: Session 8 logged out. Waiting for processes to exit. Dec 13 14:30:55.173870 systemd-logind[1404]: Removed session 8. Dec 13 14:30:55.167000 audit[1799]: CRED_DISP pid=1799 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:30:55.196786 kernel: audit: type=1106 audit(1734100255.167:213): pid=1799 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:30:55.196896 kernel: audit: type=1104 audit(1734100255.167:214): pid=1799 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:30:55.196922 kernel: audit: type=1131 audit(1734100255.167:215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.8.24:22-10.200.16.10:47598 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:30:55.167000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.8.24:22-10.200.16.10:47598 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:30:55.295576 systemd[1]: Started sshd@6-10.200.8.24:22-10.200.16.10:47608.service. Dec 13 14:30:55.294000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.24:22-10.200.16.10:47608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:30:56.001000 audit[1838]: USER_ACCT pid=1838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:30:56.003705 sshd[1838]: Accepted publickey for core from 10.200.16.10 port 47608 ssh2: RSA SHA256:VL8LvbxVNxa7jmY6OervfMBnEuOtBvTKJ3L6x/+vjOM Dec 13 14:30:56.003000 audit[1838]: CRED_ACQ pid=1838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:30:56.003000 audit[1838]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff30a02b30 a2=3 a3=0 items=0 ppid=1 pid=1838 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:30:56.003000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 14:30:56.005258 sshd[1838]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 14:30:56.010095 systemd[1]: Started session-9.scope. Dec 13 14:30:56.010777 systemd-logind[1404]: New session 9 of user core. Dec 13 14:30:56.013000 audit[1838]: USER_START pid=1838 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:30:56.015000 audit[1840]: CRED_ACQ pid=1840 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:30:56.389000 audit[1841]: USER_ACCT pid=1841 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Dec 13 14:30:56.390000 audit[1841]: CRED_REFR pid=1841 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Dec 13 14:30:56.390477 sudo[1841]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Dec 13 14:30:56.390839 sudo[1841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Dec 13 14:30:56.392000 audit[1841]: USER_START pid=1841 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Dec 13 14:30:56.420699 systemd[1]: Starting docker.service... Dec 13 14:30:56.458028 env[1851]: time="2024-12-13T14:30:56.457969820Z" level=info msg="Starting up" Dec 13 14:30:56.459427 env[1851]: time="2024-12-13T14:30:56.459388733Z" level=info msg="parsed scheme: \"unix\"" module=grpc Dec 13 14:30:56.459427 env[1851]: time="2024-12-13T14:30:56.459412633Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Dec 13 14:30:56.460158 env[1851]: time="2024-12-13T14:30:56.459437233Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Dec 13 14:30:56.460158 env[1851]: time="2024-12-13T14:30:56.459450533Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Dec 13 14:30:56.461424 env[1851]: time="2024-12-13T14:30:56.461396450Z" level=info msg="parsed scheme: \"unix\"" module=grpc Dec 13 14:30:56.461424 env[1851]: time="2024-12-13T14:30:56.461414150Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Dec 13 14:30:56.461577 env[1851]: time="2024-12-13T14:30:56.461432950Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Dec 13 14:30:56.461577 env[1851]: time="2024-12-13T14:30:56.461444850Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Dec 13 14:30:56.468521 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport1032586804-merged.mount: Deactivated successfully. Dec 13 14:30:56.547916 env[1851]: time="2024-12-13T14:30:56.547866997Z" level=info msg="Loading containers: start." Dec 13 14:30:56.579000 audit[1879]: NETFILTER_CFG table=nat:6 family=2 entries=2 op=nft_register_chain pid=1879 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:30:56.579000 audit[1879]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffca6cb5a70 a2=0 a3=7ffca6cb5a5c items=0 ppid=1851 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:30:56.579000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Dec 13 14:30:56.581000 audit[1881]: NETFILTER_CFG table=filter:7 family=2 entries=2 op=nft_register_chain pid=1881 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:30:56.581000 audit[1881]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffcd17a7270 a2=0 a3=7ffcd17a725c items=0 ppid=1851 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:30:56.581000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Dec 13 14:30:56.583000 audit[1883]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1883 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:30:56.583000 audit[1883]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffe0a21c480 a2=0 a3=7ffe0a21c46c items=0 ppid=1851 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:30:56.583000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Dec 13 14:30:56.585000 audit[1885]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_chain pid=1885 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:30:56.585000 audit[1885]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fffafda17a0 a2=0 a3=7fffafda178c items=0 ppid=1851 pid=1885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:30:56.585000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Dec 13 14:30:56.587000 audit[1887]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_rule pid=1887 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:30:56.587000 audit[1887]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff6951aa60 a2=0 a3=7fff6951aa4c items=0 ppid=1851 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:30:56.587000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Dec 13 14:30:56.589000 audit[1889]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_rule pid=1889 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:30:56.589000 audit[1889]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff3f65ab40 a2=0 a3=7fff3f65ab2c items=0 ppid=1851 pid=1889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:30:56.589000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Dec 13 14:30:56.605000 audit[1891]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_chain pid=1891 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:30:56.605000 audit[1891]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe9f78af20 a2=0 a3=7ffe9f78af0c items=0 ppid=1851 pid=1891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:30:56.605000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Dec 13 14:30:56.607000 audit[1893]: NETFILTER_CFG table=filter:13 family=2 entries=1 op=nft_register_rule pid=1893 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:30:56.607000 audit[1893]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffd33cac5c0 a2=0 a3=7ffd33cac5ac items=0 ppid=1851 pid=1893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:30:56.607000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Dec 13 14:30:56.609000 audit[1895]: NETFILTER_CFG table=filter:14 family=2 entries=2 op=nft_register_chain pid=1895 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:30:56.609000 audit[1895]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffdf3b7a140 a2=0 a3=7ffdf3b7a12c items=0 ppid=1851 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:30:56.609000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Dec 13 14:30:56.627000 audit[1899]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_unregister_rule pid=1899 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:30:56.627000 audit[1899]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffccde790f0 a2=0 a3=7ffccde790dc items=0 ppid=1851 pid=1899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:30:56.627000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Dec 13 14:30:56.633000 audit[1900]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1900 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:30:56.633000 audit[1900]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffccb1734f0 a2=0 a3=7ffccb1734dc items=0 ppid=1851 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:30:56.633000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Dec 13 14:30:56.649572 kernel: Initializing XFRM netlink socket Dec 13 14:30:56.662111 env[1851]: time="2024-12-13T14:30:56.662066784Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Dec 13 14:30:56.690000 audit[1908]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1908 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:30:56.690000 audit[1908]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffd72888c20 a2=0 a3=7ffd72888c0c items=0 ppid=1851 pid=1908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:30:56.690000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Dec 13 14:30:56.706000 audit[1911]: NETFILTER_CFG table=nat:18 family=2 entries=1 op=nft_register_rule pid=1911 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:30:56.706000 audit[1911]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffdaa41cfb0 a2=0 a3=7ffdaa41cf9c items=0 ppid=1851 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:30:56.706000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Dec 13 14:30:56.709000 audit[1914]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1914 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:30:56.709000 audit[1914]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffdc70b8380 a2=0 a3=7ffdc70b836c items=0 ppid=1851 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:30:56.709000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Dec 13 14:30:56.711000 audit[1916]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1916 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:30:56.711000 audit[1916]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffcab30d150 a2=0 a3=7ffcab30d13c items=0 ppid=1851 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:30:56.711000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Dec 13 14:30:56.713000 audit[1918]: NETFILTER_CFG table=nat:21 family=2 entries=2 op=nft_register_chain pid=1918 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:30:56.713000 audit[1918]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffe117377a0 a2=0 a3=7ffe1173778c items=0 ppid=1851 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:30:56.713000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Dec 13 14:30:56.715000 audit[1920]: NETFILTER_CFG table=nat:22 family=2 entries=2 op=nft_register_chain pid=1920 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:30:56.715000 audit[1920]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffd9b3f3b40 a2=0 a3=7ffd9b3f3b2c items=0 ppid=1851 pid=1920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:30:56.715000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Dec 13 14:30:56.717000 audit[1922]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1922 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:30:56.717000 audit[1922]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffd290180e0 a2=0 a3=7ffd290180cc items=0 ppid=1851 pid=1922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:30:56.717000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Dec 13 14:30:56.719000 audit[1924]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_register_rule pid=1924 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:30:56.719000 audit[1924]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffd7fdb98c0 a2=0 a3=7ffd7fdb98ac items=0 ppid=1851 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:30:56.719000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Dec 13 14:30:56.721000 audit[1926]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1926 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:30:56.721000 audit[1926]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffd434620a0 a2=0 a3=7ffd4346208c items=0 ppid=1851 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:30:56.721000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Dec 13 14:30:56.723000 audit[1928]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1928 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:30:56.723000 audit[1928]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffd2105e400 a2=0 a3=7ffd2105e3ec items=0 ppid=1851 pid=1928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:30:56.723000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Dec 13 14:30:56.725000 audit[1930]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_rule pid=1930 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:30:56.725000 audit[1930]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffec98b1f50 a2=0 a3=7ffec98b1f3c items=0 ppid=1851 pid=1930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:30:56.725000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Dec 13 14:30:56.726592 systemd-networkd[1577]: docker0: Link UP Dec 13 14:30:56.743000 audit[1934]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_unregister_rule pid=1934 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:30:56.743000 audit[1934]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffdebe22f70 a2=0 a3=7ffdebe22f5c items=0 ppid=1851 pid=1934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:30:56.743000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Dec 13 14:30:56.748000 audit[1935]: NETFILTER_CFG table=filter:29 family=2 entries=1 op=nft_register_rule pid=1935 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:30:56.748000 audit[1935]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffec84e1350 a2=0 a3=7ffec84e133c items=0 ppid=1851 pid=1935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:30:56.748000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Dec 13 14:30:56.749914 env[1851]: time="2024-12-13T14:30:56.749880342Z" level=info msg="Loading containers: done." Dec 13 14:30:56.762256 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3032147087-merged.mount: Deactivated successfully. Dec 13 14:30:56.817207 env[1851]: time="2024-12-13T14:30:56.817142423Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Dec 13 14:30:56.817476 env[1851]: time="2024-12-13T14:30:56.817453526Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Dec 13 14:30:56.817650 env[1851]: time="2024-12-13T14:30:56.817624728Z" level=info msg="Daemon has completed initialization" Dec 13 14:30:56.862919 systemd[1]: Started docker.service. Dec 13 14:30:56.862000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:30:56.873471 env[1851]: time="2024-12-13T14:30:56.873412810Z" level=info msg="API listen on /run/docker.sock" Dec 13 14:30:58.007518 env[1414]: time="2024-12-13T14:30:58.007468782Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.4\"" Dec 13 14:30:58.900311 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2660745484.mount: Deactivated successfully. Dec 13 14:31:00.718826 env[1414]: time="2024-12-13T14:31:00.718761915Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.31.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:00.726175 env[1414]: time="2024-12-13T14:31:00.726126072Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bdc2eadbf366279693097982a31da61cc2f1d90f07ada3f4b3b91251a18f665e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:00.730980 env[1414]: time="2024-12-13T14:31:00.730931010Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.31.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:00.734973 env[1414]: time="2024-12-13T14:31:00.734935641Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:ace6a943b058439bd6daeb74f152e7c36e6fc0b5e481cdff9364cd6ca0473e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:00.735597 env[1414]: time="2024-12-13T14:31:00.735553946Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.4\" returns image reference \"sha256:bdc2eadbf366279693097982a31da61cc2f1d90f07ada3f4b3b91251a18f665e\"" Dec 13 14:31:00.737403 env[1414]: time="2024-12-13T14:31:00.737377760Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.4\"" Dec 13 14:31:02.778367 env[1414]: time="2024-12-13T14:31:02.778305165Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.31.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:02.784808 env[1414]: time="2024-12-13T14:31:02.784753313Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:359b9f2307326a4c66172318ca63ee9792c3146ca57d53329239bd123ea70079,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:02.788721 env[1414]: time="2024-12-13T14:31:02.788678542Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.31.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:02.794664 env[1414]: time="2024-12-13T14:31:02.794618486Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:4bd1d4a449e7a1a4f375bd7c71abf48a95f8949b38f725ded255077329f21f7b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:02.795327 env[1414]: time="2024-12-13T14:31:02.795289091Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.4\" returns image reference \"sha256:359b9f2307326a4c66172318ca63ee9792c3146ca57d53329239bd123ea70079\"" Dec 13 14:31:02.796095 env[1414]: time="2024-12-13T14:31:02.796065596Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.4\"" Dec 13 14:31:04.162455 env[1414]: time="2024-12-13T14:31:04.162398872Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.31.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:04.169372 env[1414]: time="2024-12-13T14:31:04.169320021Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3a66234066fe10fa299c0a52265f90a107450f0372652867118cd9007940d674,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:04.174526 env[1414]: time="2024-12-13T14:31:04.174480457Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.31.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:04.179664 env[1414]: time="2024-12-13T14:31:04.179613694Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:1a3081cb7d21763d22eb2c0781cc462d89f501ed523ad558dea1226f128fbfdd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:04.181632 env[1414]: time="2024-12-13T14:31:04.181581408Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.4\" returns image reference \"sha256:3a66234066fe10fa299c0a52265f90a107450f0372652867118cd9007940d674\"" Dec 13 14:31:04.183826 env[1414]: time="2024-12-13T14:31:04.183791923Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.4\"" Dec 13 14:31:04.717140 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 7. Dec 13 14:31:04.717392 systemd[1]: Stopped kubelet.service. Dec 13 14:31:04.732649 kernel: kauditd_printk_skb: 84 callbacks suppressed Dec 13 14:31:04.732799 kernel: audit: type=1130 audit(1734100264.716:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:31:04.716000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:31:04.719147 systemd[1]: Starting kubelet.service... Dec 13 14:31:04.716000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:31:04.744794 kernel: audit: type=1131 audit(1734100264.716:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:31:04.890958 systemd[1]: Started kubelet.service. Dec 13 14:31:04.890000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:31:04.905572 kernel: audit: type=1130 audit(1734100264.890:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:31:04.965617 kubelet[1972]: E1213 14:31:04.965570 1972 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Dec 13 14:31:04.967249 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Dec 13 14:31:04.967415 systemd[1]: kubelet.service: Failed with result 'exit-code'. Dec 13 14:31:04.967000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Dec 13 14:31:04.983725 kernel: audit: type=1131 audit(1734100264.967:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Dec 13 14:31:06.067989 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3398728060.mount: Deactivated successfully. Dec 13 14:31:06.701170 env[1414]: time="2024-12-13T14:31:06.701110744Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.31.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:06.708024 env[1414]: time="2024-12-13T14:31:06.707964390Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ebf80573666f86f115452db568feb34f6f771c3bdc7bfed14b9577f992cfa300,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:06.711057 env[1414]: time="2024-12-13T14:31:06.711019810Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.31.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:06.714941 env[1414]: time="2024-12-13T14:31:06.714906036Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:1739b3febca392035bf6edfe31efdfa55226be7b57389b2001ae357f7dcb99cf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:06.715468 env[1414]: time="2024-12-13T14:31:06.715432540Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.4\" returns image reference \"sha256:ebf80573666f86f115452db568feb34f6f771c3bdc7bfed14b9577f992cfa300\"" Dec 13 14:31:06.716081 env[1414]: time="2024-12-13T14:31:06.716052844Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.1\"" Dec 13 14:31:07.354678 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2371259101.mount: Deactivated successfully. Dec 13 14:31:08.787916 env[1414]: time="2024-12-13T14:31:08.787853121Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:08.796286 env[1414]: time="2024-12-13T14:31:08.796230075Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cbb01a7bd410dc08ba382018ab909a674fb0e48687f0c00797ed5bc34fcc6bb4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:08.802346 env[1414]: time="2024-12-13T14:31:08.802298213Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:08.806451 env[1414]: time="2024-12-13T14:31:08.806409040Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:1eeb4c7316bacb1d4c8ead65571cd92dd21e27359f0d4917f1a5822a73b75db1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:08.807109 env[1414]: time="2024-12-13T14:31:08.807070644Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.1\" returns image reference \"sha256:cbb01a7bd410dc08ba382018ab909a674fb0e48687f0c00797ed5bc34fcc6bb4\"" Dec 13 14:31:08.807899 env[1414]: time="2024-12-13T14:31:08.807872049Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Dec 13 14:31:09.433875 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2453473319.mount: Deactivated successfully. Dec 13 14:31:09.462838 env[1414]: time="2024-12-13T14:31:09.462778261Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:09.470696 env[1414]: time="2024-12-13T14:31:09.470636710Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:09.475649 env[1414]: time="2024-12-13T14:31:09.475601741Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:09.480273 env[1414]: time="2024-12-13T14:31:09.480227670Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:09.480683 env[1414]: time="2024-12-13T14:31:09.480649572Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Dec 13 14:31:09.481338 env[1414]: time="2024-12-13T14:31:09.481311076Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\"" Dec 13 14:31:10.102471 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount476403940.mount: Deactivated successfully. Dec 13 14:31:12.768016 env[1414]: time="2024-12-13T14:31:12.767948300Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:12.775221 env[1414]: time="2024-12-13T14:31:12.775164442Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2e96e5913fc06e3d26915af3d0f2ca5048cc4b6327e661e80da792cbf8d8d9d4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:12.780446 env[1414]: time="2024-12-13T14:31:12.780390372Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:12.785042 env[1414]: time="2024-12-13T14:31:12.784993299Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:a6dc63e6e8cfa0307d7851762fa6b629afb18f28d8aa3fab5a6e91b4af60026a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:12.785666 env[1414]: time="2024-12-13T14:31:12.785626903Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\" returns image reference \"sha256:2e96e5913fc06e3d26915af3d0f2ca5048cc4b6327e661e80da792cbf8d8d9d4\"" Dec 13 14:31:15.217000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:31:15.217358 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 8. Dec 13 14:31:15.217668 systemd[1]: Stopped kubelet.service. Dec 13 14:31:15.220133 systemd[1]: Starting kubelet.service... Dec 13 14:31:15.231567 kernel: audit: type=1130 audit(1734100275.217:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:31:15.217000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:31:15.255588 kernel: audit: type=1131 audit(1734100275.217:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:31:15.361000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:31:15.361529 systemd[1]: Started kubelet.service. Dec 13 14:31:15.380569 kernel: audit: type=1130 audit(1734100275.361:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:31:15.436079 kubelet[1999]: E1213 14:31:15.436021 1999 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Dec 13 14:31:15.438000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Dec 13 14:31:15.438343 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Dec 13 14:31:15.438501 systemd[1]: kubelet.service: Failed with result 'exit-code'. Dec 13 14:31:15.455582 kernel: audit: type=1131 audit(1734100275.438:257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Dec 13 14:31:15.876809 systemd[1]: Stopped kubelet.service. Dec 13 14:31:15.876000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:31:15.882445 systemd[1]: Starting kubelet.service... Dec 13 14:31:15.893580 kernel: audit: type=1130 audit(1734100275.876:258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:31:15.879000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:31:15.909676 kernel: audit: type=1131 audit(1734100275.879:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:31:15.932192 systemd[1]: Reloading. Dec 13 14:31:16.045021 /usr/lib/systemd/system-generators/torcx-generator[2030]: time="2024-12-13T14:31:16Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.6 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.6 /var/lib/torcx/store]" Dec 13 14:31:16.045064 /usr/lib/systemd/system-generators/torcx-generator[2030]: time="2024-12-13T14:31:16Z" level=info msg="torcx already run" Dec 13 14:31:16.144995 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Dec 13 14:31:16.145018 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Dec 13 14:31:16.162093 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Dec 13 14:31:16.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.279654 kernel: audit: type=1400 audit(1734100276.251:260): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.279800 kernel: audit: type=1400 audit(1734100276.251:261): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.279825 kernel: audit: type=1400 audit(1734100276.251:262): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.323176 kernel: audit: type=1400 audit(1734100276.251:263): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.265000 audit: BPF prog-id=41 op=LOAD Dec 13 14:31:16.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.292000 audit: BPF prog-id=42 op=LOAD Dec 13 14:31:16.292000 audit: BPF prog-id=24 op=UNLOAD Dec 13 14:31:16.292000 audit: BPF prog-id=25 op=UNLOAD Dec 13 14:31:16.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.324000 audit: BPF prog-id=43 op=LOAD Dec 13 14:31:16.324000 audit: BPF prog-id=38 op=UNLOAD Dec 13 14:31:16.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.329000 audit: BPF prog-id=44 op=LOAD Dec 13 14:31:16.329000 audit: BPF prog-id=26 op=UNLOAD Dec 13 14:31:16.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.330000 audit: BPF prog-id=45 op=LOAD Dec 13 14:31:16.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.331000 audit: BPF prog-id=46 op=LOAD Dec 13 14:31:16.331000 audit: BPF prog-id=27 op=UNLOAD Dec 13 14:31:16.331000 audit: BPF prog-id=28 op=UNLOAD Dec 13 14:31:16.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.333000 audit: BPF prog-id=47 op=LOAD Dec 13 14:31:16.333000 audit: BPF prog-id=40 op=UNLOAD Dec 13 14:31:16.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.334000 audit: BPF prog-id=48 op=LOAD Dec 13 14:31:16.334000 audit: BPF prog-id=34 op=UNLOAD Dec 13 14:31:16.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.335000 audit: BPF prog-id=49 op=LOAD Dec 13 14:31:16.335000 audit: BPF prog-id=33 op=UNLOAD Dec 13 14:31:16.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.337000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.337000 audit: BPF prog-id=50 op=LOAD Dec 13 14:31:16.337000 audit: BPF prog-id=35 op=UNLOAD Dec 13 14:31:16.337000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.337000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.337000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.337000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.337000 audit: BPF prog-id=51 op=LOAD Dec 13 14:31:16.337000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.337000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.337000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.337000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.337000 audit: BPF prog-id=52 op=LOAD Dec 13 14:31:16.337000 audit: BPF prog-id=36 op=UNLOAD Dec 13 14:31:16.337000 audit: BPF prog-id=37 op=UNLOAD Dec 13 14:31:16.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.339000 audit: BPF prog-id=53 op=LOAD Dec 13 14:31:16.339000 audit: BPF prog-id=30 op=UNLOAD Dec 13 14:31:16.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.339000 audit: BPF prog-id=54 op=LOAD Dec 13 14:31:16.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:16.339000 audit: BPF prog-id=55 op=LOAD Dec 13 14:31:16.339000 audit: BPF prog-id=31 op=UNLOAD Dec 13 14:31:16.339000 audit: BPF prog-id=32 op=UNLOAD Dec 13 14:31:16.361460 systemd[1]: Started kubelet.service. Dec 13 14:31:16.361000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:31:16.364992 systemd[1]: Stopping kubelet.service... Dec 13 14:31:16.365763 systemd[1]: kubelet.service: Deactivated successfully. Dec 13 14:31:16.365967 systemd[1]: Stopped kubelet.service. Dec 13 14:31:16.365000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:31:16.367974 systemd[1]: Starting kubelet.service... Dec 13 14:31:16.582000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:31:16.580327 systemd[1]: Started kubelet.service. Dec 13 14:31:17.290773 kubelet[2100]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Dec 13 14:31:17.290773 kubelet[2100]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Dec 13 14:31:17.290773 kubelet[2100]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Dec 13 14:31:17.291321 kubelet[2100]: I1213 14:31:17.290847 2100 server.go:206] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Dec 13 14:31:18.117226 kubelet[2100]: I1213 14:31:18.117177 2100 server.go:486] "Kubelet version" kubeletVersion="v1.31.0" Dec 13 14:31:18.117226 kubelet[2100]: I1213 14:31:18.117209 2100 server.go:488] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Dec 13 14:31:18.117563 kubelet[2100]: I1213 14:31:18.117532 2100 server.go:929] "Client rotation is on, will bootstrap in background" Dec 13 14:31:18.152023 kubelet[2100]: E1213 14:31:18.151974 2100 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.200.8.24:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.200.8.24:6443: connect: connection refused" logger="UnhandledError" Dec 13 14:31:18.152196 kubelet[2100]: I1213 14:31:18.152119 2100 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Dec 13 14:31:18.164403 kubelet[2100]: E1213 14:31:18.164349 2100 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Dec 13 14:31:18.164403 kubelet[2100]: I1213 14:31:18.164399 2100 server.go:1403] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Dec 13 14:31:18.169411 kubelet[2100]: I1213 14:31:18.169382 2100 server.go:744] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Dec 13 14:31:18.169599 kubelet[2100]: I1213 14:31:18.169530 2100 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Dec 13 14:31:18.169780 kubelet[2100]: I1213 14:31:18.169716 2100 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Dec 13 14:31:18.169980 kubelet[2100]: I1213 14:31:18.169762 2100 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510.3.6-a-f6adf0345d","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Dec 13 14:31:18.170180 kubelet[2100]: I1213 14:31:18.169994 2100 topology_manager.go:138] "Creating topology manager with none policy" Dec 13 14:31:18.170180 kubelet[2100]: I1213 14:31:18.170010 2100 container_manager_linux.go:300] "Creating device plugin manager" Dec 13 14:31:18.170180 kubelet[2100]: I1213 14:31:18.170179 2100 state_mem.go:36] "Initialized new in-memory state store" Dec 13 14:31:18.175111 kubelet[2100]: I1213 14:31:18.175075 2100 kubelet.go:408] "Attempting to sync node with API server" Dec 13 14:31:18.175212 kubelet[2100]: I1213 14:31:18.175117 2100 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Dec 13 14:31:18.175212 kubelet[2100]: I1213 14:31:18.175162 2100 kubelet.go:314] "Adding apiserver pod source" Dec 13 14:31:18.175212 kubelet[2100]: I1213 14:31:18.175181 2100 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Dec 13 14:31:18.180847 kubelet[2100]: W1213 14:31:18.180776 2100 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.200.8.24:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.6-a-f6adf0345d&limit=500&resourceVersion=0": dial tcp 10.200.8.24:6443: connect: connection refused Dec 13 14:31:18.181021 kubelet[2100]: E1213 14:31:18.180999 2100 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.200.8.24:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.6-a-f6adf0345d&limit=500&resourceVersion=0\": dial tcp 10.200.8.24:6443: connect: connection refused" logger="UnhandledError" Dec 13 14:31:18.185084 kubelet[2100]: W1213 14:31:18.184798 2100 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.200.8.24:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.200.8.24:6443: connect: connection refused Dec 13 14:31:18.185084 kubelet[2100]: E1213 14:31:18.184916 2100 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.200.8.24:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.200.8.24:6443: connect: connection refused" logger="UnhandledError" Dec 13 14:31:18.185235 kubelet[2100]: I1213 14:31:18.185153 2100 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Dec 13 14:31:18.207903 kubelet[2100]: I1213 14:31:18.207876 2100 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Dec 13 14:31:18.208231 kubelet[2100]: W1213 14:31:18.208213 2100 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Dec 13 14:31:18.209025 kubelet[2100]: I1213 14:31:18.209005 2100 server.go:1269] "Started kubelet" Dec 13 14:31:18.215038 kubelet[2100]: I1213 14:31:18.214285 2100 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Dec 13 14:31:18.215446 kubelet[2100]: I1213 14:31:18.215419 2100 server.go:460] "Adding debug handlers to kubelet server" Dec 13 14:31:18.217000 audit[2100]: AVC avc: denied { mac_admin } for pid=2100 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:18.217000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Dec 13 14:31:18.217000 audit[2100]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0009d1080 a1=c00092f020 a2=c0009d1050 a3=25 items=0 ppid=1 pid=2100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:18.217000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Dec 13 14:31:18.217000 audit[2100]: AVC avc: denied { mac_admin } for pid=2100 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:18.217000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Dec 13 14:31:18.217000 audit[2100]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0009f46e0 a1=c00092f038 a2=c0009d1110 a3=25 items=0 ppid=1 pid=2100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:18.217000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Dec 13 14:31:18.218832 kubelet[2100]: I1213 14:31:18.218196 2100 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Dec 13 14:31:18.218832 kubelet[2100]: I1213 14:31:18.218255 2100 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Dec 13 14:31:18.218832 kubelet[2100]: I1213 14:31:18.218334 2100 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Dec 13 14:31:18.219102 kubelet[2100]: I1213 14:31:18.219043 2100 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Dec 13 14:31:18.219373 kubelet[2100]: I1213 14:31:18.219357 2100 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Dec 13 14:31:18.221996 kubelet[2100]: E1213 14:31:18.220653 2100 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.200.8.24:6443/api/v1/namespaces/default/events\": dial tcp 10.200.8.24:6443: connect: connection refused" event="&Event{ObjectMeta:{ci-3510.3.6-a-f6adf0345d.1810c303ef8d5235 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ci-3510.3.6-a-f6adf0345d,UID:ci-3510.3.6-a-f6adf0345d,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ci-3510.3.6-a-f6adf0345d,},FirstTimestamp:2024-12-13 14:31:18.208975413 +0000 UTC m=+1.623170830,LastTimestamp:2024-12-13 14:31:18.208975413 +0000 UTC m=+1.623170830,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ci-3510.3.6-a-f6adf0345d,}" Dec 13 14:31:18.221000 audit[2110]: NETFILTER_CFG table=mangle:30 family=2 entries=2 op=nft_register_chain pid=2110 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:18.221000 audit[2110]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc9feb72e0 a2=0 a3=7ffc9feb72cc items=0 ppid=2100 pid=2110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:18.221000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Dec 13 14:31:18.223233 kubelet[2100]: I1213 14:31:18.222860 2100 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Dec 13 14:31:18.223000 audit[2111]: NETFILTER_CFG table=filter:31 family=2 entries=1 op=nft_register_chain pid=2111 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:18.223000 audit[2111]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffef2fa060 a2=0 a3=7fffef2fa04c items=0 ppid=2100 pid=2111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:18.223000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Dec 13 14:31:18.226836 kubelet[2100]: E1213 14:31:18.226281 2100 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.6-a-f6adf0345d\" not found" Dec 13 14:31:18.226836 kubelet[2100]: I1213 14:31:18.226340 2100 volume_manager.go:289] "Starting Kubelet Volume Manager" Dec 13 14:31:18.226836 kubelet[2100]: I1213 14:31:18.226605 2100 desired_state_of_world_populator.go:146] "Desired state populator starts to run" Dec 13 14:31:18.226836 kubelet[2100]: I1213 14:31:18.226676 2100 reconciler.go:26] "Reconciler: start to sync state" Dec 13 14:31:18.227251 kubelet[2100]: W1213 14:31:18.227169 2100 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.200.8.24:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.24:6443: connect: connection refused Dec 13 14:31:18.227327 kubelet[2100]: E1213 14:31:18.227247 2100 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.200.8.24:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.200.8.24:6443: connect: connection refused" logger="UnhandledError" Dec 13 14:31:18.227450 kubelet[2100]: I1213 14:31:18.227429 2100 factory.go:221] Registration of the systemd container factory successfully Dec 13 14:31:18.227534 kubelet[2100]: I1213 14:31:18.227515 2100 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Dec 13 14:31:18.229738 kubelet[2100]: E1213 14:31:18.229690 2100 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.24:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.6-a-f6adf0345d?timeout=10s\": dial tcp 10.200.8.24:6443: connect: connection refused" interval="200ms" Dec 13 14:31:18.229000 audit[2113]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=2113 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:18.229000 audit[2113]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff5cd1bb80 a2=0 a3=7fff5cd1bb6c items=0 ppid=2100 pid=2113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:18.229000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Dec 13 14:31:18.230238 kubelet[2100]: I1213 14:31:18.230219 2100 factory.go:221] Registration of the containerd container factory successfully Dec 13 14:31:18.231000 audit[2115]: NETFILTER_CFG table=filter:33 family=2 entries=2 op=nft_register_chain pid=2115 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:18.231000 audit[2115]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd4a3248a0 a2=0 a3=7ffd4a32488c items=0 ppid=2100 pid=2115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:18.231000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Dec 13 14:31:18.250574 kubelet[2100]: E1213 14:31:18.250536 2100 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Dec 13 14:31:18.295024 kubelet[2100]: I1213 14:31:18.294994 2100 cpu_manager.go:214] "Starting CPU manager" policy="none" Dec 13 14:31:18.295024 kubelet[2100]: I1213 14:31:18.295016 2100 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Dec 13 14:31:18.295449 kubelet[2100]: I1213 14:31:18.295052 2100 state_mem.go:36] "Initialized new in-memory state store" Dec 13 14:31:18.300396 kubelet[2100]: I1213 14:31:18.300363 2100 policy_none.go:49] "None policy: Start" Dec 13 14:31:18.301135 kubelet[2100]: I1213 14:31:18.301108 2100 memory_manager.go:170] "Starting memorymanager" policy="None" Dec 13 14:31:18.301135 kubelet[2100]: I1213 14:31:18.301139 2100 state_mem.go:35] "Initializing new in-memory state store" Dec 13 14:31:18.310144 systemd[1]: Created slice kubepods.slice. Dec 13 14:31:18.314619 systemd[1]: Created slice kubepods-burstable.slice. Dec 13 14:31:18.317726 systemd[1]: Created slice kubepods-besteffort.slice. Dec 13 14:31:18.325000 audit[2123]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_rule pid=2123 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:18.325000 audit[2123]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffeab5e0720 a2=0 a3=7ffeab5e070c items=0 ppid=2100 pid=2123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:18.325000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Dec 13 14:31:18.326528 kubelet[2100]: I1213 14:31:18.326502 2100 manager.go:510] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Dec 13 14:31:18.325000 audit[2100]: AVC avc: denied { mac_admin } for pid=2100 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:18.325000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Dec 13 14:31:18.325000 audit[2100]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0007462a0 a1=c00092f680 a2=c000746270 a3=25 items=0 ppid=1 pid=2100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:18.325000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Dec 13 14:31:18.326866 kubelet[2100]: I1213 14:31:18.326604 2100 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Dec 13 14:31:18.326866 kubelet[2100]: I1213 14:31:18.326742 2100 eviction_manager.go:189] "Eviction manager: starting control loop" Dec 13 14:31:18.326866 kubelet[2100]: I1213 14:31:18.326755 2100 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Dec 13 14:31:18.327456 kubelet[2100]: I1213 14:31:18.327435 2100 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Dec 13 14:31:18.328748 kubelet[2100]: I1213 14:31:18.328722 2100 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Dec 13 14:31:18.329000 audit[2124]: NETFILTER_CFG table=mangle:35 family=10 entries=2 op=nft_register_chain pid=2124 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 14:31:18.329000 audit[2124]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffde70168f0 a2=0 a3=7ffde70168dc items=0 ppid=2100 pid=2124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:18.329000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Dec 13 14:31:18.331239 kubelet[2100]: E1213 14:31:18.331216 2100 eviction_manager.go:285] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.6-a-f6adf0345d\" not found" Dec 13 14:31:18.331338 kubelet[2100]: I1213 14:31:18.331320 2100 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Dec 13 14:31:18.331393 kubelet[2100]: I1213 14:31:18.331345 2100 status_manager.go:217] "Starting to sync pod status with apiserver" Dec 13 14:31:18.331393 kubelet[2100]: I1213 14:31:18.331375 2100 kubelet.go:2321] "Starting kubelet main sync loop" Dec 13 14:31:18.331472 kubelet[2100]: E1213 14:31:18.331417 2100 kubelet.go:2345] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Dec 13 14:31:18.332421 kubelet[2100]: W1213 14:31:18.332355 2100 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.200.8.24:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.24:6443: connect: connection refused Dec 13 14:31:18.332503 kubelet[2100]: E1213 14:31:18.332438 2100 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.200.8.24:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.200.8.24:6443: connect: connection refused" logger="UnhandledError" Dec 13 14:31:18.332000 audit[2125]: NETFILTER_CFG table=mangle:36 family=2 entries=1 op=nft_register_chain pid=2125 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:18.332000 audit[2125]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd54d1d4c0 a2=0 a3=7ffd54d1d4ac items=0 ppid=2100 pid=2125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:18.332000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Dec 13 14:31:18.334000 audit[2126]: NETFILTER_CFG table=mangle:37 family=10 entries=1 op=nft_register_chain pid=2126 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 14:31:18.334000 audit[2126]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff95ee5b70 a2=0 a3=7fff95ee5b5c items=0 ppid=2100 pid=2126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:18.334000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Dec 13 14:31:18.334000 audit[2127]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_chain pid=2127 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:18.334000 audit[2127]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe06ce54c0 a2=0 a3=7ffe06ce54ac items=0 ppid=2100 pid=2127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:18.334000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Dec 13 14:31:18.335000 audit[2128]: NETFILTER_CFG table=nat:39 family=10 entries=2 op=nft_register_chain pid=2128 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 14:31:18.335000 audit[2128]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffdcad61500 a2=0 a3=7ffdcad614ec items=0 ppid=2100 pid=2128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:18.335000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Dec 13 14:31:18.336000 audit[2129]: NETFILTER_CFG table=filter:40 family=2 entries=1 op=nft_register_chain pid=2129 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:18.336000 audit[2129]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc89f91ba0 a2=0 a3=7ffc89f91b8c items=0 ppid=2100 pid=2129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:18.336000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Dec 13 14:31:18.337000 audit[2130]: NETFILTER_CFG table=filter:41 family=10 entries=2 op=nft_register_chain pid=2130 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 14:31:18.337000 audit[2130]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd6dbfc3a0 a2=0 a3=7ffd6dbfc38c items=0 ppid=2100 pid=2130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:18.337000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Dec 13 14:31:18.429600 kubelet[2100]: I1213 14:31:18.429436 2100 kubelet_node_status.go:72] "Attempting to register node" node="ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:18.431179 kubelet[2100]: E1213 14:31:18.431129 2100 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.24:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.6-a-f6adf0345d?timeout=10s\": dial tcp 10.200.8.24:6443: connect: connection refused" interval="400ms" Dec 13 14:31:18.434531 kubelet[2100]: E1213 14:31:18.434491 2100 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.200.8.24:6443/api/v1/nodes\": dial tcp 10.200.8.24:6443: connect: connection refused" node="ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:18.442522 systemd[1]: Created slice kubepods-burstable-pod2b0a099dee43fc948e9b5981dc4cb5d1.slice. Dec 13 14:31:18.454738 systemd[1]: Created slice kubepods-burstable-podf81d1f373ec43e86e00aafaa64d14ea8.slice. Dec 13 14:31:18.469506 systemd[1]: Created slice kubepods-burstable-pod10e363d1a9929cb51172bfba5c44264d.slice. Dec 13 14:31:18.529756 kubelet[2100]: I1213 14:31:18.529697 2100 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/2b0a099dee43fc948e9b5981dc4cb5d1-k8s-certs\") pod \"kube-apiserver-ci-3510.3.6-a-f6adf0345d\" (UID: \"2b0a099dee43fc948e9b5981dc4cb5d1\") " pod="kube-system/kube-apiserver-ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:18.529756 kubelet[2100]: I1213 14:31:18.529746 2100 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/f81d1f373ec43e86e00aafaa64d14ea8-ca-certs\") pod \"kube-controller-manager-ci-3510.3.6-a-f6adf0345d\" (UID: \"f81d1f373ec43e86e00aafaa64d14ea8\") " pod="kube-system/kube-controller-manager-ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:18.530017 kubelet[2100]: I1213 14:31:18.529774 2100 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/f81d1f373ec43e86e00aafaa64d14ea8-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.6-a-f6adf0345d\" (UID: \"f81d1f373ec43e86e00aafaa64d14ea8\") " pod="kube-system/kube-controller-manager-ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:18.530017 kubelet[2100]: I1213 14:31:18.529796 2100 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/f81d1f373ec43e86e00aafaa64d14ea8-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.6-a-f6adf0345d\" (UID: \"f81d1f373ec43e86e00aafaa64d14ea8\") " pod="kube-system/kube-controller-manager-ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:18.530017 kubelet[2100]: I1213 14:31:18.529821 2100 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/f81d1f373ec43e86e00aafaa64d14ea8-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.6-a-f6adf0345d\" (UID: \"f81d1f373ec43e86e00aafaa64d14ea8\") " pod="kube-system/kube-controller-manager-ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:18.530017 kubelet[2100]: I1213 14:31:18.529846 2100 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/2b0a099dee43fc948e9b5981dc4cb5d1-ca-certs\") pod \"kube-apiserver-ci-3510.3.6-a-f6adf0345d\" (UID: \"2b0a099dee43fc948e9b5981dc4cb5d1\") " pod="kube-system/kube-apiserver-ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:18.530017 kubelet[2100]: I1213 14:31:18.529868 2100 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/2b0a099dee43fc948e9b5981dc4cb5d1-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.6-a-f6adf0345d\" (UID: \"2b0a099dee43fc948e9b5981dc4cb5d1\") " pod="kube-system/kube-apiserver-ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:18.530208 kubelet[2100]: I1213 14:31:18.529894 2100 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/f81d1f373ec43e86e00aafaa64d14ea8-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.6-a-f6adf0345d\" (UID: \"f81d1f373ec43e86e00aafaa64d14ea8\") " pod="kube-system/kube-controller-manager-ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:18.530208 kubelet[2100]: I1213 14:31:18.529920 2100 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/10e363d1a9929cb51172bfba5c44264d-kubeconfig\") pod \"kube-scheduler-ci-3510.3.6-a-f6adf0345d\" (UID: \"10e363d1a9929cb51172bfba5c44264d\") " pod="kube-system/kube-scheduler-ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:18.637297 kubelet[2100]: I1213 14:31:18.637259 2100 kubelet_node_status.go:72] "Attempting to register node" node="ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:18.637733 kubelet[2100]: E1213 14:31:18.637690 2100 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.200.8.24:6443/api/v1/nodes\": dial tcp 10.200.8.24:6443: connect: connection refused" node="ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:18.754118 env[1414]: time="2024-12-13T14:31:18.754059973Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.6-a-f6adf0345d,Uid:2b0a099dee43fc948e9b5981dc4cb5d1,Namespace:kube-system,Attempt:0,}" Dec 13 14:31:18.760737 env[1414]: time="2024-12-13T14:31:18.760695607Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.6-a-f6adf0345d,Uid:f81d1f373ec43e86e00aafaa64d14ea8,Namespace:kube-system,Attempt:0,}" Dec 13 14:31:18.772796 env[1414]: time="2024-12-13T14:31:18.772758168Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.6-a-f6adf0345d,Uid:10e363d1a9929cb51172bfba5c44264d,Namespace:kube-system,Attempt:0,}" Dec 13 14:31:18.832774 kubelet[2100]: E1213 14:31:18.832712 2100 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.24:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.6-a-f6adf0345d?timeout=10s\": dial tcp 10.200.8.24:6443: connect: connection refused" interval="800ms" Dec 13 14:31:19.040449 kubelet[2100]: I1213 14:31:19.040073 2100 kubelet_node_status.go:72] "Attempting to register node" node="ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:19.040743 kubelet[2100]: E1213 14:31:19.040706 2100 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.200.8.24:6443/api/v1/nodes\": dial tcp 10.200.8.24:6443: connect: connection refused" node="ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:19.634349 kubelet[2100]: E1213 14:31:19.634291 2100 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.24:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.6-a-f6adf0345d?timeout=10s\": dial tcp 10.200.8.24:6443: connect: connection refused" interval="1.6s" Dec 13 14:31:19.638903 kubelet[2100]: W1213 14:31:19.638841 2100 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.200.8.24:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.6-a-f6adf0345d&limit=500&resourceVersion=0": dial tcp 10.200.8.24:6443: connect: connection refused Dec 13 14:31:19.639042 kubelet[2100]: E1213 14:31:19.638916 2100 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.200.8.24:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.6-a-f6adf0345d&limit=500&resourceVersion=0\": dial tcp 10.200.8.24:6443: connect: connection refused" logger="UnhandledError" Dec 13 14:31:19.670187 kubelet[2100]: W1213 14:31:19.670130 2100 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.200.8.24:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.24:6443: connect: connection refused Dec 13 14:31:19.670380 kubelet[2100]: E1213 14:31:19.670197 2100 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.200.8.24:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.200.8.24:6443: connect: connection refused" logger="UnhandledError" Dec 13 14:31:19.723633 kubelet[2100]: W1213 14:31:19.723534 2100 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.200.8.24:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.200.8.24:6443: connect: connection refused Dec 13 14:31:19.723814 kubelet[2100]: E1213 14:31:19.723641 2100 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.200.8.24:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.200.8.24:6443: connect: connection refused" logger="UnhandledError" Dec 13 14:31:19.765918 kubelet[2100]: W1213 14:31:19.765842 2100 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.200.8.24:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.24:6443: connect: connection refused Dec 13 14:31:19.766103 kubelet[2100]: E1213 14:31:19.765927 2100 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.200.8.24:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.200.8.24:6443: connect: connection refused" logger="UnhandledError" Dec 13 14:31:19.843653 kubelet[2100]: I1213 14:31:19.843613 2100 kubelet_node_status.go:72] "Attempting to register node" node="ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:19.844075 kubelet[2100]: E1213 14:31:19.844041 2100 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.200.8.24:6443/api/v1/nodes\": dial tcp 10.200.8.24:6443: connect: connection refused" node="ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:20.004645 kubelet[2100]: E1213 14:31:20.004491 2100 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.200.8.24:6443/api/v1/namespaces/default/events\": dial tcp 10.200.8.24:6443: connect: connection refused" event="&Event{ObjectMeta:{ci-3510.3.6-a-f6adf0345d.1810c303ef8d5235 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ci-3510.3.6-a-f6adf0345d,UID:ci-3510.3.6-a-f6adf0345d,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ci-3510.3.6-a-f6adf0345d,},FirstTimestamp:2024-12-13 14:31:18.208975413 +0000 UTC m=+1.623170830,LastTimestamp:2024-12-13 14:31:18.208975413 +0000 UTC m=+1.623170830,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ci-3510.3.6-a-f6adf0345d,}" Dec 13 14:31:20.226959 kubelet[2100]: E1213 14:31:20.226915 2100 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.200.8.24:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.200.8.24:6443: connect: connection refused" logger="UnhandledError" Dec 13 14:31:20.971868 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1292236694.mount: Deactivated successfully. Dec 13 14:31:21.007653 env[1414]: time="2024-12-13T14:31:21.007588955Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:21.011338 env[1414]: time="2024-12-13T14:31:21.011283073Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:21.026422 env[1414]: time="2024-12-13T14:31:21.026357444Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:21.029972 env[1414]: time="2024-12-13T14:31:21.029919561Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:21.033378 env[1414]: time="2024-12-13T14:31:21.033325677Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:21.036796 env[1414]: time="2024-12-13T14:31:21.036754093Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:21.039716 env[1414]: time="2024-12-13T14:31:21.039673807Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:21.043576 env[1414]: time="2024-12-13T14:31:21.043517525Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:21.051403 env[1414]: time="2024-12-13T14:31:21.051345663Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:21.055325 env[1414]: time="2024-12-13T14:31:21.055267681Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:21.073569 env[1414]: time="2024-12-13T14:31:21.073488068Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:21.093017 env[1414]: time="2024-12-13T14:31:21.092961860Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:21.151042 env[1414]: time="2024-12-13T14:31:21.144354104Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Dec 13 14:31:21.151042 env[1414]: time="2024-12-13T14:31:21.144437004Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Dec 13 14:31:21.151042 env[1414]: time="2024-12-13T14:31:21.144452004Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Dec 13 14:31:21.151042 env[1414]: time="2024-12-13T14:31:21.144706405Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ec508c765b3304167c3d5911c32f1033b2df30fd67e49aff96b45b062ed6b94a pid=2139 runtime=io.containerd.runc.v2 Dec 13 14:31:21.164005 env[1414]: time="2024-12-13T14:31:21.163784196Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Dec 13 14:31:21.164005 env[1414]: time="2024-12-13T14:31:21.163919896Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Dec 13 14:31:21.164005 env[1414]: time="2024-12-13T14:31:21.163936696Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Dec 13 14:31:21.164351 env[1414]: time="2024-12-13T14:31:21.164182698Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/638da36b709b197e35fbf02a68fd7bce55dc03c4e4c9a669ffbd5f168cf12c73 pid=2160 runtime=io.containerd.runc.v2 Dec 13 14:31:21.175804 systemd[1]: Started cri-containerd-ec508c765b3304167c3d5911c32f1033b2df30fd67e49aff96b45b062ed6b94a.scope. Dec 13 14:31:21.184671 systemd[1]: Started cri-containerd-638da36b709b197e35fbf02a68fd7bce55dc03c4e4c9a669ffbd5f168cf12c73.scope. Dec 13 14:31:21.227818 kernel: kauditd_printk_skb: 219 callbacks suppressed Dec 13 14:31:21.228024 kernel: audit: type=1400 audit(1734100281.208:450): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.246584 kernel: audit: type=1400 audit(1734100281.208:451): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.246841 env[1414]: time="2024-12-13T14:31:21.237118744Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Dec 13 14:31:21.246841 env[1414]: time="2024-12-13T14:31:21.237235544Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Dec 13 14:31:21.246841 env[1414]: time="2024-12-13T14:31:21.237258744Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Dec 13 14:31:21.246841 env[1414]: time="2024-12-13T14:31:21.237415645Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3fb09f921917cd68baa550ffd07f1e6e4e68a53296f922b035f2da03705ee489 pid=2204 runtime=io.containerd.runc.v2 Dec 13 14:31:21.247107 kubelet[2100]: E1213 14:31:21.235731 2100 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.24:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.6-a-f6adf0345d?timeout=10s\": dial tcp 10.200.8.24:6443: connect: connection refused" interval="3.2s" Dec 13 14:31:21.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.264712 kernel: audit: type=1400 audit(1734100281.208:452): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.280668 kernel: audit: type=1400 audit(1734100281.208:453): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.280709 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Dec 13 14:31:21.308528 kernel: audit: type=1400 audit(1734100281.208:454): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.308704 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Dec 13 14:31:21.308730 kernel: audit: backlog limit exceeded Dec 13 14:31:21.308750 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Dec 13 14:31:21.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.313604 kernel: audit: type=1400 audit(1734100281.208:455): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.213000 audit: BPF prog-id=56 op=LOAD Dec 13 14:31:21.213000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.213000 audit[2146]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2139 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:21.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563353038633736356233333034313637633364353931316333326631 Dec 13 14:31:21.213000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.213000 audit[2146]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2139 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:21.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563353038633736356233333034313637633364353931316333326631 Dec 13 14:31:21.213000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.213000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.213000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.213000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.213000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.213000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.213000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.213000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.213000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.213000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.213000 audit: BPF prog-id=57 op=LOAD Dec 13 14:31:21.213000 audit[2146]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003dc9d0 items=0 ppid=2139 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:21.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563353038633736356233333034313637633364353931316333326631 Dec 13 14:31:21.228000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.228000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.228000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.228000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.228000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.228000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.228000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.228000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.228000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.228000 audit: BPF prog-id=58 op=LOAD Dec 13 14:31:21.228000 audit[2146]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000024998 items=0 ppid=2139 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:21.228000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563353038633736356233333034313637633364353931316333326631 Dec 13 14:31:21.228000 audit: BPF prog-id=58 op=UNLOAD Dec 13 14:31:21.228000 audit: BPF prog-id=57 op=UNLOAD Dec 13 14:31:21.228000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.228000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.228000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.228000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.228000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.228000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.228000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.228000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.228000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.228000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.228000 audit: BPF prog-id=59 op=LOAD Dec 13 14:31:21.228000 audit[2146]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000024da8 items=0 ppid=2139 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:21.228000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563353038633736356233333034313637633364353931316333326631 Dec 13 14:31:21.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.318000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.318000 audit: BPF prog-id=61 op=LOAD Dec 13 14:31:21.318000 audit[2174]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000308350 items=0 ppid=2160 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:21.318000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633386461333662373039623139376533356662663032613638666437 Dec 13 14:31:21.328000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.328000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.328000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.328000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.328000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.328000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.328000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.328000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.328000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.328000 audit: BPF prog-id=62 op=LOAD Dec 13 14:31:21.328000 audit[2174]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000308398 items=0 ppid=2160 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:21.328000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633386461333662373039623139376533356662663032613638666437 Dec 13 14:31:21.328000 audit: BPF prog-id=62 op=UNLOAD Dec 13 14:31:21.328000 audit: BPF prog-id=61 op=UNLOAD Dec 13 14:31:21.328000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.328000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.328000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.328000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.328000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.328000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.328000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.328000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.328000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.328000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.328000 audit: BPF prog-id=63 op=LOAD Dec 13 14:31:21.328000 audit[2174]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003087a8 items=0 ppid=2160 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:21.328000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633386461333662373039623139376533356662663032613638666437 Dec 13 14:31:21.330635 systemd[1]: Started cri-containerd-3fb09f921917cd68baa550ffd07f1e6e4e68a53296f922b035f2da03705ee489.scope. Dec 13 14:31:21.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.365000 audit: BPF prog-id=64 op=LOAD Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit[2214]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2204 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:21.367000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366623039663932313931376364363862616135353066666430376631 Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit[2214]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2204 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:21.367000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366623039663932313931376364363862616135353066666430376631 Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit: BPF prog-id=65 op=LOAD Dec 13 14:31:21.367000 audit[2214]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001a8a80 items=0 ppid=2204 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:21.367000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366623039663932313931376364363862616135353066666430376631 Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit: BPF prog-id=66 op=LOAD Dec 13 14:31:21.367000 audit[2214]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001a8ac8 items=0 ppid=2204 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:21.367000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366623039663932313931376364363862616135353066666430376631 Dec 13 14:31:21.367000 audit: BPF prog-id=66 op=UNLOAD Dec 13 14:31:21.367000 audit: BPF prog-id=65 op=UNLOAD Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.367000 audit: BPF prog-id=67 op=LOAD Dec 13 14:31:21.367000 audit[2214]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0001a8ed8 items=0 ppid=2204 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:21.367000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366623039663932313931376364363862616135353066666430376631 Dec 13 14:31:21.372565 env[1414]: time="2024-12-13T14:31:21.372508286Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.6-a-f6adf0345d,Uid:f81d1f373ec43e86e00aafaa64d14ea8,Namespace:kube-system,Attempt:0,} returns sandbox id \"ec508c765b3304167c3d5911c32f1033b2df30fd67e49aff96b45b062ed6b94a\"" Dec 13 14:31:21.378174 env[1414]: time="2024-12-13T14:31:21.378107412Z" level=info msg="CreateContainer within sandbox \"ec508c765b3304167c3d5911c32f1033b2df30fd67e49aff96b45b062ed6b94a\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Dec 13 14:31:21.383696 env[1414]: time="2024-12-13T14:31:21.383642538Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.6-a-f6adf0345d,Uid:2b0a099dee43fc948e9b5981dc4cb5d1,Namespace:kube-system,Attempt:0,} returns sandbox id \"638da36b709b197e35fbf02a68fd7bce55dc03c4e4c9a669ffbd5f168cf12c73\"" Dec 13 14:31:21.388872 env[1414]: time="2024-12-13T14:31:21.388823863Z" level=info msg="CreateContainer within sandbox \"638da36b709b197e35fbf02a68fd7bce55dc03c4e4c9a669ffbd5f168cf12c73\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Dec 13 14:31:21.420252 env[1414]: time="2024-12-13T14:31:21.420192912Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.6-a-f6adf0345d,Uid:10e363d1a9929cb51172bfba5c44264d,Namespace:kube-system,Attempt:0,} returns sandbox id \"3fb09f921917cd68baa550ffd07f1e6e4e68a53296f922b035f2da03705ee489\"" Dec 13 14:31:21.423331 env[1414]: time="2024-12-13T14:31:21.423285026Z" level=info msg="CreateContainer within sandbox \"3fb09f921917cd68baa550ffd07f1e6e4e68a53296f922b035f2da03705ee489\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Dec 13 14:31:21.430933 env[1414]: time="2024-12-13T14:31:21.430871862Z" level=info msg="CreateContainer within sandbox \"ec508c765b3304167c3d5911c32f1033b2df30fd67e49aff96b45b062ed6b94a\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"a49e01dff57552a93ac5e8d18b4c3d1e5d74086cd9f8887e536fdc68251f62c8\"" Dec 13 14:31:21.431738 env[1414]: time="2024-12-13T14:31:21.431695366Z" level=info msg="StartContainer for \"a49e01dff57552a93ac5e8d18b4c3d1e5d74086cd9f8887e536fdc68251f62c8\"" Dec 13 14:31:21.446433 kubelet[2100]: I1213 14:31:21.446386 2100 kubelet_node_status.go:72] "Attempting to register node" node="ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:21.446894 kubelet[2100]: E1213 14:31:21.446855 2100 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.200.8.24:6443/api/v1/nodes\": dial tcp 10.200.8.24:6443: connect: connection refused" node="ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:21.453503 systemd[1]: Started cri-containerd-a49e01dff57552a93ac5e8d18b4c3d1e5d74086cd9f8887e536fdc68251f62c8.scope. Dec 13 14:31:21.460102 env[1414]: time="2024-12-13T14:31:21.460042801Z" level=info msg="CreateContainer within sandbox \"638da36b709b197e35fbf02a68fd7bce55dc03c4e4c9a669ffbd5f168cf12c73\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"e6812d2c2d15d3bd89befcd397eabfd7f67c0661624cb131e346d742e2cba4de\"" Dec 13 14:31:21.461665 env[1414]: time="2024-12-13T14:31:21.460577103Z" level=info msg="StartContainer for \"e6812d2c2d15d3bd89befcd397eabfd7f67c0661624cb131e346d742e2cba4de\"" Dec 13 14:31:21.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.476000 audit: BPF prog-id=68 op=LOAD Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit[2264]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:21.477000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134396530316466663537353532613933616335653864313862346333 Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit[2264]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:21.477000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134396530316466663537353532613933616335653864313862346333 Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit: BPF prog-id=69 op=LOAD Dec 13 14:31:21.477000 audit[2264]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0001c8560 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:21.477000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134396530316466663537353532613933616335653864313862346333 Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit: BPF prog-id=70 op=LOAD Dec 13 14:31:21.477000 audit[2264]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0001c85a8 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:21.477000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134396530316466663537353532613933616335653864313862346333 Dec 13 14:31:21.477000 audit: BPF prog-id=70 op=UNLOAD Dec 13 14:31:21.477000 audit: BPF prog-id=69 op=UNLOAD Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.477000 audit: BPF prog-id=71 op=LOAD Dec 13 14:31:21.477000 audit[2264]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0001c89b8 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:21.477000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134396530316466663537353532613933616335653864313862346333 Dec 13 14:31:21.501785 env[1414]: time="2024-12-13T14:31:21.501713398Z" level=info msg="CreateContainer within sandbox \"3fb09f921917cd68baa550ffd07f1e6e4e68a53296f922b035f2da03705ee489\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"b607e8c59c60b74958e49771217ff9c3ae982dc1ade251f669a8ebe751bf0d2e\"" Dec 13 14:31:21.502834 env[1414]: time="2024-12-13T14:31:21.502777603Z" level=info msg="StartContainer for \"b607e8c59c60b74958e49771217ff9c3ae982dc1ade251f669a8ebe751bf0d2e\"" Dec 13 14:31:21.509600 systemd[1]: Started cri-containerd-e6812d2c2d15d3bd89befcd397eabfd7f67c0661624cb131e346d742e2cba4de.scope. Dec 13 14:31:21.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.548000 audit: BPF prog-id=72 op=LOAD Dec 13 14:31:21.548000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.548000 audit[2290]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2160 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:21.548000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536383132643263326431356433626438396265666364333937656162 Dec 13 14:31:21.548000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.548000 audit[2290]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2160 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:21.548000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536383132643263326431356433626438396265666364333937656162 Dec 13 14:31:21.548000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.548000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.548000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.548000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.548000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.548000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.548000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.548000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.548000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.548000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.548000 audit: BPF prog-id=73 op=LOAD Dec 13 14:31:21.548000 audit[2290]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003b4a10 items=0 ppid=2160 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:21.548000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536383132643263326431356433626438396265666364333937656162 Dec 13 14:31:21.549000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.549000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.549000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.549000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.549000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.549000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.549000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.549000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.549000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.549000 audit: BPF prog-id=74 op=LOAD Dec 13 14:31:21.549000 audit[2290]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003b4a58 items=0 ppid=2160 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:21.549000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536383132643263326431356433626438396265666364333937656162 Dec 13 14:31:21.549000 audit: BPF prog-id=74 op=UNLOAD Dec 13 14:31:21.549000 audit: BPF prog-id=73 op=UNLOAD Dec 13 14:31:21.549000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.549000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.549000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.549000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.549000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.549000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.549000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.549000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.549000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.549000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.549000 audit: BPF prog-id=75 op=LOAD Dec 13 14:31:21.549000 audit[2290]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003b4e68 items=0 ppid=2160 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:21.549000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536383132643263326431356433626438396265666364333937656162 Dec 13 14:31:21.563817 systemd[1]: Started cri-containerd-b607e8c59c60b74958e49771217ff9c3ae982dc1ade251f669a8ebe751bf0d2e.scope. Dec 13 14:31:21.574237 env[1414]: time="2024-12-13T14:31:21.574155442Z" level=info msg="StartContainer for \"a49e01dff57552a93ac5e8d18b4c3d1e5d74086cd9f8887e536fdc68251f62c8\" returns successfully" Dec 13 14:31:21.580786 kubelet[2100]: W1213 14:31:21.580684 2100 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.200.8.24:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.24:6443: connect: connection refused Dec 13 14:31:21.581002 kubelet[2100]: E1213 14:31:21.580799 2100 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.200.8.24:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.200.8.24:6443: connect: connection refused" logger="UnhandledError" Dec 13 14:31:21.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.616000 audit: BPF prog-id=76 op=LOAD Dec 13 14:31:21.617000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.617000 audit[2311]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2204 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:21.617000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236303765386335396336306237343935386534393737313231376666 Dec 13 14:31:21.618000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.618000 audit[2311]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2204 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:21.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236303765386335396336306237343935386534393737313231376666 Dec 13 14:31:21.618000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.618000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.618000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.618000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.618000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.618000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.618000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.618000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.618000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.618000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.618000 audit: BPF prog-id=77 op=LOAD Dec 13 14:31:21.618000 audit[2311]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000215b30 items=0 ppid=2204 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:21.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236303765386335396336306237343935386534393737313231376666 Dec 13 14:31:21.619000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.619000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.619000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.619000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.619000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.619000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.619000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.619000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.619000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.619000 audit: BPF prog-id=78 op=LOAD Dec 13 14:31:21.619000 audit[2311]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000215b78 items=0 ppid=2204 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:21.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236303765386335396336306237343935386534393737313231376666 Dec 13 14:31:21.619000 audit: BPF prog-id=78 op=UNLOAD Dec 13 14:31:21.619000 audit: BPF prog-id=77 op=UNLOAD Dec 13 14:31:21.619000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.619000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.619000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.619000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.619000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.619000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.619000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.619000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.619000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.619000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:21.619000 audit: BPF prog-id=79 op=LOAD Dec 13 14:31:21.619000 audit[2311]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000215f88 items=0 ppid=2204 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:21.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236303765386335396336306237343935386534393737313231376666 Dec 13 14:31:21.624286 env[1414]: time="2024-12-13T14:31:21.624235079Z" level=info msg="StartContainer for \"e6812d2c2d15d3bd89befcd397eabfd7f67c0661624cb131e346d742e2cba4de\" returns successfully" Dec 13 14:31:21.697716 env[1414]: time="2024-12-13T14:31:21.697649927Z" level=info msg="StartContainer for \"b607e8c59c60b74958e49771217ff9c3ae982dc1ade251f669a8ebe751bf0d2e\" returns successfully" Dec 13 14:31:23.477000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:31:23.477000 audit[2277]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000056a80 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:31:23.477000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:31:23.478000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:31:23.478000 audit[2277]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000a08020 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:31:23.478000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:31:23.764000 audit[2312]: AVC avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:31:23.764000 audit[2312]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c0085d5530 a2=fc6 a3=0 items=0 ppid=2160 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 key=(null) Dec 13 14:31:23.764000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Dec 13 14:31:23.764000 audit[2312]: AVC avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:31:23.764000 audit[2312]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c008fa8c00 a2=fc6 a3=0 items=0 ppid=2160 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 key=(null) Dec 13 14:31:23.764000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Dec 13 14:31:23.765000 audit[2312]: AVC avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:31:23.765000 audit[2312]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c0085d5650 a2=fc6 a3=0 items=0 ppid=2160 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 key=(null) Dec 13 14:31:23.765000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Dec 13 14:31:23.769000 audit[2312]: AVC avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:31:23.769000 audit[2312]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c008fa8f80 a2=fc6 a3=0 items=0 ppid=2160 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 key=(null) Dec 13 14:31:23.769000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Dec 13 14:31:23.769000 audit[2312]: AVC avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:31:23.769000 audit[2312]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c0085d5bf0 a2=fc6 a3=0 items=0 ppid=2160 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 key=(null) Dec 13 14:31:23.769000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Dec 13 14:31:23.771000 audit[2312]: AVC avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7362 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:31:23.771000 audit[2312]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c0044f4750 a2=fc6 a3=0 items=0 ppid=2160 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 key=(null) Dec 13 14:31:23.771000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Dec 13 14:31:24.187951 kubelet[2100]: I1213 14:31:24.187819 2100 apiserver.go:52] "Watching apiserver" Dec 13 14:31:24.213148 kubelet[2100]: E1213 14:31:24.213099 2100 csi_plugin.go:305] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "ci-3510.3.6-a-f6adf0345d" not found Dec 13 14:31:24.227330 kubelet[2100]: I1213 14:31:24.227279 2100 desired_state_of_world_populator.go:154] "Finished populating initial desired state of world" Dec 13 14:31:24.440363 kubelet[2100]: E1213 14:31:24.440208 2100 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.6-a-f6adf0345d\" not found" node="ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:24.570146 kubelet[2100]: E1213 14:31:24.570103 2100 csi_plugin.go:305] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "ci-3510.3.6-a-f6adf0345d" not found Dec 13 14:31:24.648837 kubelet[2100]: I1213 14:31:24.648800 2100 kubelet_node_status.go:72] "Attempting to register node" node="ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:24.657048 kubelet[2100]: I1213 14:31:24.657011 2100 kubelet_node_status.go:75] "Successfully registered node" node="ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:26.994452 systemd[1]: Reloading. Dec 13 14:31:27.085195 /usr/lib/systemd/system-generators/torcx-generator[2392]: time="2024-12-13T14:31:27Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.6 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.6 /var/lib/torcx/store]" Dec 13 14:31:27.085680 /usr/lib/systemd/system-generators/torcx-generator[2392]: time="2024-12-13T14:31:27Z" level=info msg="torcx already run" Dec 13 14:31:27.101637 kubelet[2100]: W1213 14:31:27.101539 2100 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Dec 13 14:31:27.181617 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Dec 13 14:31:27.181638 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Dec 13 14:31:27.198773 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Dec 13 14:31:27.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.301623 kernel: kauditd_printk_skb: 378 callbacks suppressed Dec 13 14:31:27.301751 kernel: audit: type=1400 audit(1734100287.283:562): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.328997 kernel: audit: type=1400 audit(1734100287.283:563): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.329149 kernel: audit: type=1400 audit(1734100287.283:564): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.342776 kernel: audit: type=1400 audit(1734100287.283:565): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.369516 kernel: audit: type=1400 audit(1734100287.283:566): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.369633 kernel: audit: type=1400 audit(1734100287.283:567): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.396196 kernel: audit: type=1400 audit(1734100287.283:568): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.396343 kernel: audit: type=1400 audit(1734100287.283:569): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.396560 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Dec 13 14:31:27.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.301000 audit: BPF prog-id=80 op=LOAD Dec 13 14:31:27.301000 audit: BPF prog-id=60 op=UNLOAD Dec 13 14:31:27.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.315000 audit: BPF prog-id=81 op=LOAD Dec 13 14:31:27.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.315000 audit: BPF prog-id=82 op=LOAD Dec 13 14:31:27.315000 audit: BPF prog-id=41 op=UNLOAD Dec 13 14:31:27.315000 audit: BPF prog-id=42 op=UNLOAD Dec 13 14:31:27.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.329000 audit: BPF prog-id=83 op=LOAD Dec 13 14:31:27.329000 audit: BPF prog-id=43 op=UNLOAD Dec 13 14:31:27.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.342000 audit: BPF prog-id=84 op=LOAD Dec 13 14:31:27.342000 audit: BPF prog-id=76 op=UNLOAD Dec 13 14:31:27.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.395000 audit: BPF prog-id=85 op=LOAD Dec 13 14:31:27.395000 audit: BPF prog-id=44 op=UNLOAD Dec 13 14:31:27.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.406312 kernel: audit: audit_lost=14 audit_rate_limit=0 audit_backlog_limit=64 Dec 13 14:31:27.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.405000 audit: BPF prog-id=86 op=LOAD Dec 13 14:31:27.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.406000 audit: BPF prog-id=87 op=LOAD Dec 13 14:31:27.406000 audit: BPF prog-id=45 op=UNLOAD Dec 13 14:31:27.406000 audit: BPF prog-id=46 op=UNLOAD Dec 13 14:31:27.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.407000 audit: BPF prog-id=88 op=LOAD Dec 13 14:31:27.407000 audit: BPF prog-id=47 op=UNLOAD Dec 13 14:31:27.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.407000 audit: BPF prog-id=89 op=LOAD Dec 13 14:31:27.407000 audit: BPF prog-id=48 op=UNLOAD Dec 13 14:31:27.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.408000 audit: BPF prog-id=90 op=LOAD Dec 13 14:31:27.408000 audit: BPF prog-id=49 op=UNLOAD Dec 13 14:31:27.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.410000 audit: BPF prog-id=91 op=LOAD Dec 13 14:31:27.410000 audit: BPF prog-id=50 op=UNLOAD Dec 13 14:31:27.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.410000 audit: BPF prog-id=92 op=LOAD Dec 13 14:31:27.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.410000 audit: BPF prog-id=93 op=LOAD Dec 13 14:31:27.410000 audit: BPF prog-id=51 op=UNLOAD Dec 13 14:31:27.410000 audit: BPF prog-id=52 op=UNLOAD Dec 13 14:31:27.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.414000 audit: BPF prog-id=94 op=LOAD Dec 13 14:31:27.414000 audit: BPF prog-id=53 op=UNLOAD Dec 13 14:31:27.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.414000 audit: BPF prog-id=95 op=LOAD Dec 13 14:31:27.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.414000 audit: BPF prog-id=96 op=LOAD Dec 13 14:31:27.414000 audit: BPF prog-id=54 op=UNLOAD Dec 13 14:31:27.414000 audit: BPF prog-id=55 op=UNLOAD Dec 13 14:31:27.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.416000 audit: BPF prog-id=97 op=LOAD Dec 13 14:31:27.416000 audit: BPF prog-id=72 op=UNLOAD Dec 13 14:31:27.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.417000 audit: BPF prog-id=98 op=LOAD Dec 13 14:31:27.417000 audit: BPF prog-id=64 op=UNLOAD Dec 13 14:31:27.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.418000 audit: BPF prog-id=99 op=LOAD Dec 13 14:31:27.418000 audit: BPF prog-id=56 op=UNLOAD Dec 13 14:31:27.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:27.419000 audit: BPF prog-id=100 op=LOAD Dec 13 14:31:27.419000 audit: BPF prog-id=68 op=UNLOAD Dec 13 14:31:27.436252 systemd[1]: Stopping kubelet.service... Dec 13 14:31:27.456895 systemd[1]: kubelet.service: Deactivated successfully. Dec 13 14:31:27.457123 systemd[1]: Stopped kubelet.service. Dec 13 14:31:27.456000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:31:27.457203 systemd[1]: kubelet.service: Consumed 1.351s CPU time. Dec 13 14:31:27.459382 systemd[1]: Starting kubelet.service... Dec 13 14:31:30.360000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=7387 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Dec 13 14:31:30.360000 audit[2277]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000d09bc0 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:31:30.360000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:31:31.860000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:31:31.860000 audit[2277]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001812b40 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:31:31.860000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:31:31.861000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:31:31.861000 audit[2277]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001812d00 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:31:31.861000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:31:31.861000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:31:31.861000 audit[2277]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001812ec0 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:31:31.861000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:31:31.862000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:31:31.862000 audit[2277]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001727880 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:31:31.862000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:31:33.076000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:31:33.075270 systemd[1]: Started kubelet.service. Dec 13 14:31:33.080714 kernel: kauditd_printk_skb: 252 callbacks suppressed Dec 13 14:31:33.080799 kernel: audit: type=1130 audit(1734100293.076:811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:31:33.137373 kubelet[2458]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Dec 13 14:31:33.137373 kubelet[2458]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Dec 13 14:31:33.137373 kubelet[2458]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Dec 13 14:31:33.137907 kubelet[2458]: I1213 14:31:33.137485 2458 server.go:206] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Dec 13 14:31:33.147884 kubelet[2458]: I1213 14:31:33.147845 2458 server.go:486] "Kubelet version" kubeletVersion="v1.31.0" Dec 13 14:31:33.148084 kubelet[2458]: I1213 14:31:33.148072 2458 server.go:488] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Dec 13 14:31:33.148908 kubelet[2458]: I1213 14:31:33.148882 2458 server.go:929] "Client rotation is on, will bootstrap in background" Dec 13 14:31:33.153845 kubelet[2458]: I1213 14:31:33.153821 2458 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Dec 13 14:31:33.159336 kubelet[2458]: I1213 14:31:33.159305 2458 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Dec 13 14:31:33.165007 kubelet[2458]: E1213 14:31:33.164977 2458 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Dec 13 14:31:33.165174 kubelet[2458]: I1213 14:31:33.165163 2458 server.go:1403] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Dec 13 14:31:33.173577 kubelet[2458]: I1213 14:31:33.169049 2458 server.go:744] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Dec 13 14:31:33.173577 kubelet[2458]: I1213 14:31:33.169236 2458 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Dec 13 14:31:33.173577 kubelet[2458]: I1213 14:31:33.169371 2458 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Dec 13 14:31:33.173577 kubelet[2458]: I1213 14:31:33.169408 2458 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510.3.6-a-f6adf0345d","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Dec 13 14:31:33.173935 kubelet[2458]: I1213 14:31:33.169672 2458 topology_manager.go:138] "Creating topology manager with none policy" Dec 13 14:31:33.173935 kubelet[2458]: I1213 14:31:33.169688 2458 container_manager_linux.go:300] "Creating device plugin manager" Dec 13 14:31:33.173935 kubelet[2458]: I1213 14:31:33.169727 2458 state_mem.go:36] "Initialized new in-memory state store" Dec 13 14:31:33.173935 kubelet[2458]: I1213 14:31:33.169867 2458 kubelet.go:408] "Attempting to sync node with API server" Dec 13 14:31:33.173935 kubelet[2458]: I1213 14:31:33.169882 2458 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Dec 13 14:31:33.173935 kubelet[2458]: I1213 14:31:33.170592 2458 kubelet.go:314] "Adding apiserver pod source" Dec 13 14:31:33.173935 kubelet[2458]: I1213 14:31:33.170614 2458 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Dec 13 14:31:33.179927 kubelet[2458]: I1213 14:31:33.179899 2458 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Dec 13 14:31:33.180459 kubelet[2458]: I1213 14:31:33.180439 2458 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Dec 13 14:31:33.180989 kubelet[2458]: I1213 14:31:33.180970 2458 server.go:1269] "Started kubelet" Dec 13 14:31:33.182000 audit[2458]: AVC avc: denied { mac_admin } for pid=2458 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:33.197569 kernel: audit: type=1400 audit(1734100293.182:812): avc: denied { mac_admin } for pid=2458 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:33.199665 kubelet[2458]: I1213 14:31:33.199610 2458 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Dec 13 14:31:33.201034 kubelet[2458]: I1213 14:31:33.201005 2458 server.go:460] "Adding debug handlers to kubelet server" Dec 13 14:31:33.182000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Dec 13 14:31:33.210571 kernel: audit: type=1401 audit(1734100293.182:812): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Dec 13 14:31:33.182000 audit[2458]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b76e70 a1=c000bd6330 a2=c000b76e40 a3=25 items=0 ppid=1 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:33.212742 kubelet[2458]: I1213 14:31:33.212685 2458 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Dec 13 14:31:33.213101 kubelet[2458]: I1213 14:31:33.213083 2458 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Dec 13 14:31:33.213684 kubelet[2458]: I1213 14:31:33.213665 2458 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Dec 13 14:31:33.213819 kubelet[2458]: I1213 14:31:33.213807 2458 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Dec 13 14:31:33.213904 kubelet[2458]: I1213 14:31:33.213898 2458 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Dec 13 14:31:33.231606 kernel: audit: type=1300 audit(1734100293.182:812): arch=c000003e syscall=188 success=no exit=-22 a0=c000b76e70 a1=c000bd6330 a2=c000b76e40 a3=25 items=0 ppid=1 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:33.182000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Dec 13 14:31:33.251628 kernel: audit: type=1327 audit(1734100293.182:812): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Dec 13 14:31:33.251685 kubelet[2458]: I1213 14:31:33.246866 2458 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Dec 13 14:31:33.210000 audit[2458]: AVC avc: denied { mac_admin } for pid=2458 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:33.259572 kubelet[2458]: I1213 14:31:33.255467 2458 volume_manager.go:289] "Starting Kubelet Volume Manager" Dec 13 14:31:33.259572 kubelet[2458]: I1213 14:31:33.256488 2458 desired_state_of_world_populator.go:146] "Desired state populator starts to run" Dec 13 14:31:33.259572 kubelet[2458]: I1213 14:31:33.256646 2458 reconciler.go:26] "Reconciler: start to sync state" Dec 13 14:31:33.260196 kubelet[2458]: I1213 14:31:33.260174 2458 factory.go:221] Registration of the systemd container factory successfully Dec 13 14:31:33.260374 kubelet[2458]: I1213 14:31:33.260357 2458 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Dec 13 14:31:33.263181 kubelet[2458]: E1213 14:31:33.263162 2458 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Dec 13 14:31:33.264849 kubelet[2458]: I1213 14:31:33.264832 2458 factory.go:221] Registration of the containerd container factory successfully Dec 13 14:31:33.210000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Dec 13 14:31:33.274744 kernel: audit: type=1400 audit(1734100293.210:813): avc: denied { mac_admin } for pid=2458 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:33.274934 kernel: audit: type=1401 audit(1734100293.210:813): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Dec 13 14:31:33.210000 audit[2458]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b3d7a0 a1=c000bd6600 a2=c000b77d70 a3=25 items=0 ppid=1 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:33.281581 kubelet[2458]: I1213 14:31:33.281536 2458 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Dec 13 14:31:33.282632 kubelet[2458]: I1213 14:31:33.282611 2458 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Dec 13 14:31:33.282748 kubelet[2458]: I1213 14:31:33.282739 2458 status_manager.go:217] "Starting to sync pod status with apiserver" Dec 13 14:31:33.282816 kubelet[2458]: I1213 14:31:33.282809 2458 kubelet.go:2321] "Starting kubelet main sync loop" Dec 13 14:31:33.282940 kubelet[2458]: E1213 14:31:33.282923 2458 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Dec 13 14:31:33.296218 kernel: audit: type=1300 audit(1734100293.210:813): arch=c000003e syscall=188 success=no exit=-22 a0=c000b3d7a0 a1=c000bd6600 a2=c000b77d70 a3=25 items=0 ppid=1 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:33.210000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Dec 13 14:31:33.320139 kernel: audit: type=1327 audit(1734100293.210:813): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Dec 13 14:31:33.359887 kubelet[2458]: I1213 14:31:33.359860 2458 cpu_manager.go:214] "Starting CPU manager" policy="none" Dec 13 14:31:33.360080 kubelet[2458]: I1213 14:31:33.360066 2458 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Dec 13 14:31:33.360179 kubelet[2458]: I1213 14:31:33.360170 2458 state_mem.go:36] "Initialized new in-memory state store" Dec 13 14:31:33.360475 kubelet[2458]: I1213 14:31:33.360453 2458 state_mem.go:88] "Updated default CPUSet" cpuSet="" Dec 13 14:31:33.360653 kubelet[2458]: I1213 14:31:33.360619 2458 state_mem.go:96] "Updated CPUSet assignments" assignments={} Dec 13 14:31:33.360764 kubelet[2458]: I1213 14:31:33.360753 2458 policy_none.go:49] "None policy: Start" Dec 13 14:31:33.361700 kubelet[2458]: I1213 14:31:33.361683 2458 memory_manager.go:170] "Starting memorymanager" policy="None" Dec 13 14:31:33.361804 kubelet[2458]: I1213 14:31:33.361795 2458 state_mem.go:35] "Initializing new in-memory state store" Dec 13 14:31:33.362060 kubelet[2458]: I1213 14:31:33.362048 2458 state_mem.go:75] "Updated machine memory state" Dec 13 14:31:33.377191 kubelet[2458]: I1213 14:31:33.377157 2458 manager.go:510] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Dec 13 14:31:33.402606 kernel: audit: type=1400 audit(1734100293.383:814): avc: denied { mac_admin } for pid=2458 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:33.383000 audit[2458]: AVC avc: denied { mac_admin } for pid=2458 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:33.402835 env[1414]: time="2024-12-13T14:31:33.386059673Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Dec 13 14:31:33.403199 kubelet[2458]: I1213 14:31:33.384109 2458 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Dec 13 14:31:33.403199 kubelet[2458]: I1213 14:31:33.384254 2458 eviction_manager.go:189] "Eviction manager: starting control loop" Dec 13 14:31:33.403199 kubelet[2458]: I1213 14:31:33.384266 2458 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Dec 13 14:31:33.403199 kubelet[2458]: E1213 14:31:33.384017 2458 kubelet.go:2345] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Dec 13 14:31:33.403199 kubelet[2458]: I1213 14:31:33.384596 2458 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Dec 13 14:31:33.403199 kubelet[2458]: I1213 14:31:33.385517 2458 kuberuntime_manager.go:1633] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Dec 13 14:31:33.403199 kubelet[2458]: I1213 14:31:33.386283 2458 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Dec 13 14:31:33.383000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Dec 13 14:31:33.383000 audit[2458]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000ff7c80 a1=c00107b728 a2=c000ff7c50 a3=25 items=0 ppid=1 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:33.383000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Dec 13 14:31:33.509773 kubelet[2458]: I1213 14:31:33.509729 2458 kubelet_node_status.go:72] "Attempting to register node" node="ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:33.520449 kubelet[2458]: I1213 14:31:33.520412 2458 kubelet_node_status.go:111] "Node was previously registered" node="ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:33.520658 kubelet[2458]: I1213 14:31:33.520511 2458 kubelet_node_status.go:75] "Successfully registered node" node="ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:33.596251 kubelet[2458]: W1213 14:31:33.596205 2458 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Dec 13 14:31:33.598445 kubelet[2458]: W1213 14:31:33.598417 2458 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Dec 13 14:31:33.598731 kubelet[2458]: E1213 14:31:33.598692 2458 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ci-3510.3.6-a-f6adf0345d\" already exists" pod="kube-system/kube-scheduler-ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:33.598932 kubelet[2458]: W1213 14:31:33.598904 2458 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Dec 13 14:31:33.660276 kubelet[2458]: I1213 14:31:33.660130 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/10e363d1a9929cb51172bfba5c44264d-kubeconfig\") pod \"kube-scheduler-ci-3510.3.6-a-f6adf0345d\" (UID: \"10e363d1a9929cb51172bfba5c44264d\") " pod="kube-system/kube-scheduler-ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:33.660276 kubelet[2458]: I1213 14:31:33.660182 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/2b0a099dee43fc948e9b5981dc4cb5d1-k8s-certs\") pod \"kube-apiserver-ci-3510.3.6-a-f6adf0345d\" (UID: \"2b0a099dee43fc948e9b5981dc4cb5d1\") " pod="kube-system/kube-apiserver-ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:33.660276 kubelet[2458]: I1213 14:31:33.660214 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/f81d1f373ec43e86e00aafaa64d14ea8-ca-certs\") pod \"kube-controller-manager-ci-3510.3.6-a-f6adf0345d\" (UID: \"f81d1f373ec43e86e00aafaa64d14ea8\") " pod="kube-system/kube-controller-manager-ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:33.660276 kubelet[2458]: I1213 14:31:33.660243 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/f81d1f373ec43e86e00aafaa64d14ea8-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.6-a-f6adf0345d\" (UID: \"f81d1f373ec43e86e00aafaa64d14ea8\") " pod="kube-system/kube-controller-manager-ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:33.660276 kubelet[2458]: I1213 14:31:33.660273 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/f81d1f373ec43e86e00aafaa64d14ea8-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.6-a-f6adf0345d\" (UID: \"f81d1f373ec43e86e00aafaa64d14ea8\") " pod="kube-system/kube-controller-manager-ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:33.660702 kubelet[2458]: I1213 14:31:33.660302 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/2b0a099dee43fc948e9b5981dc4cb5d1-ca-certs\") pod \"kube-apiserver-ci-3510.3.6-a-f6adf0345d\" (UID: \"2b0a099dee43fc948e9b5981dc4cb5d1\") " pod="kube-system/kube-apiserver-ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:33.660702 kubelet[2458]: I1213 14:31:33.660326 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/2b0a099dee43fc948e9b5981dc4cb5d1-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.6-a-f6adf0345d\" (UID: \"2b0a099dee43fc948e9b5981dc4cb5d1\") " pod="kube-system/kube-apiserver-ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:33.660702 kubelet[2458]: I1213 14:31:33.660349 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/f81d1f373ec43e86e00aafaa64d14ea8-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.6-a-f6adf0345d\" (UID: \"f81d1f373ec43e86e00aafaa64d14ea8\") " pod="kube-system/kube-controller-manager-ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:33.660702 kubelet[2458]: I1213 14:31:33.660391 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/f81d1f373ec43e86e00aafaa64d14ea8-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.6-a-f6adf0345d\" (UID: \"f81d1f373ec43e86e00aafaa64d14ea8\") " pod="kube-system/kube-controller-manager-ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:34.179571 kubelet[2458]: I1213 14:31:34.179505 2458 apiserver.go:52] "Watching apiserver" Dec 13 14:31:34.188757 systemd[1]: Created slice kubepods-besteffort-podaf2dfe80_90b1_4f97_8fb6_0bceac859e5a.slice. Dec 13 14:31:34.211739 kubelet[2458]: I1213 14:31:34.211554 2458 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.6-a-f6adf0345d" podStartSLOduration=1.211522032 podStartE2EDuration="1.211522032s" podCreationTimestamp="2024-12-13 14:31:33 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-12-13 14:31:34.201873396 +0000 UTC m=+1.116861145" watchObservedRunningTime="2024-12-13 14:31:34.211522032 +0000 UTC m=+1.126509781" Dec 13 14:31:34.235180 kubelet[2458]: I1213 14:31:34.235112 2458 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.6-a-f6adf0345d" podStartSLOduration=1.235086618 podStartE2EDuration="1.235086618s" podCreationTimestamp="2024-12-13 14:31:33 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-12-13 14:31:34.212042234 +0000 UTC m=+1.127029883" watchObservedRunningTime="2024-12-13 14:31:34.235086618 +0000 UTC m=+1.150074367" Dec 13 14:31:34.256899 kubelet[2458]: I1213 14:31:34.256865 2458 desired_state_of_world_populator.go:154] "Finished populating initial desired state of world" Dec 13 14:31:34.264390 kubelet[2458]: I1213 14:31:34.264349 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/af2dfe80-90b1-4f97-8fb6-0bceac859e5a-lib-modules\") pod \"kube-proxy-cmx8x\" (UID: \"af2dfe80-90b1-4f97-8fb6-0bceac859e5a\") " pod="kube-system/kube-proxy-cmx8x" Dec 13 14:31:34.264629 kubelet[2458]: I1213 14:31:34.264610 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tpc8q\" (UniqueName: \"kubernetes.io/projected/af2dfe80-90b1-4f97-8fb6-0bceac859e5a-kube-api-access-tpc8q\") pod \"kube-proxy-cmx8x\" (UID: \"af2dfe80-90b1-4f97-8fb6-0bceac859e5a\") " pod="kube-system/kube-proxy-cmx8x" Dec 13 14:31:34.264752 kubelet[2458]: I1213 14:31:34.264738 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/af2dfe80-90b1-4f97-8fb6-0bceac859e5a-kube-proxy\") pod \"kube-proxy-cmx8x\" (UID: \"af2dfe80-90b1-4f97-8fb6-0bceac859e5a\") " pod="kube-system/kube-proxy-cmx8x" Dec 13 14:31:34.264847 kubelet[2458]: I1213 14:31:34.264834 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/af2dfe80-90b1-4f97-8fb6-0bceac859e5a-xtables-lock\") pod \"kube-proxy-cmx8x\" (UID: \"af2dfe80-90b1-4f97-8fb6-0bceac859e5a\") " pod="kube-system/kube-proxy-cmx8x" Dec 13 14:31:34.272805 kubelet[2458]: I1213 14:31:34.272737 2458 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.6-a-f6adf0345d" podStartSLOduration=7.272717255 podStartE2EDuration="7.272717255s" podCreationTimestamp="2024-12-13 14:31:27 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-12-13 14:31:34.23580962 +0000 UTC m=+1.150797269" watchObservedRunningTime="2024-12-13 14:31:34.272717255 +0000 UTC m=+1.187705004" Dec 13 14:31:34.354163 kubelet[2458]: W1213 14:31:34.354117 2458 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Dec 13 14:31:34.354354 kubelet[2458]: E1213 14:31:34.354205 2458 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510.3.6-a-f6adf0345d\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:34.358538 kubelet[2458]: W1213 14:31:34.358512 2458 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Dec 13 14:31:34.358811 kubelet[2458]: E1213 14:31:34.358781 2458 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ci-3510.3.6-a-f6adf0345d\" already exists" pod="kube-system/kube-scheduler-ci-3510.3.6-a-f6adf0345d" Dec 13 14:31:34.377254 kubelet[2458]: I1213 14:31:34.377220 2458 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Dec 13 14:31:34.496527 env[1414]: time="2024-12-13T14:31:34.496474273Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-cmx8x,Uid:af2dfe80-90b1-4f97-8fb6-0bceac859e5a,Namespace:kube-system,Attempt:0,}" Dec 13 14:31:36.053811 systemd[1]: Created slice kubepods-besteffort-pod576e0c44_6bc3_44a9_8ee2_0d25e7dacce1.slice. Dec 13 14:31:36.075111 kubelet[2458]: I1213 14:31:36.075069 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5f874\" (UniqueName: \"kubernetes.io/projected/576e0c44-6bc3-44a9-8ee2-0d25e7dacce1-kube-api-access-5f874\") pod \"tigera-operator-76c4976dd7-zfg7x\" (UID: \"576e0c44-6bc3-44a9-8ee2-0d25e7dacce1\") " pod="tigera-operator/tigera-operator-76c4976dd7-zfg7x" Dec 13 14:31:36.075695 kubelet[2458]: I1213 14:31:36.075675 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/576e0c44-6bc3-44a9-8ee2-0d25e7dacce1-var-lib-calico\") pod \"tigera-operator-76c4976dd7-zfg7x\" (UID: \"576e0c44-6bc3-44a9-8ee2-0d25e7dacce1\") " pod="tigera-operator/tigera-operator-76c4976dd7-zfg7x" Dec 13 14:31:36.359033 env[1414]: time="2024-12-13T14:31:36.358620164Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-76c4976dd7-zfg7x,Uid:576e0c44-6bc3-44a9-8ee2-0d25e7dacce1,Namespace:tigera-operator,Attempt:0,}" Dec 13 14:31:37.827695 env[1414]: time="2024-12-13T14:31:37.827605689Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Dec 13 14:31:37.827695 env[1414]: time="2024-12-13T14:31:37.827645289Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Dec 13 14:31:37.828204 env[1414]: time="2024-12-13T14:31:37.827660089Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Dec 13 14:31:37.828204 env[1414]: time="2024-12-13T14:31:37.827874890Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ffdfa8e8a6786fb74533bce34a9caaf48e0500213d052d168f4334c8cb660627 pid=2524 runtime=io.containerd.runc.v2 Dec 13 14:31:37.853754 systemd[1]: Started cri-containerd-ffdfa8e8a6786fb74533bce34a9caaf48e0500213d052d168f4334c8cb660627.scope. Dec 13 14:31:37.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.877000 audit: BPF prog-id=101 op=LOAD Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit[2534]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2524 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:37.879000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666646661386538613637383666623734353333626365333461396361 Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit[2534]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2524 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:37.879000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666646661386538613637383666623734353333626365333461396361 Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit: BPF prog-id=102 op=LOAD Dec 13 14:31:37.879000 audit[2534]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00033e480 items=0 ppid=2524 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:37.879000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666646661386538613637383666623734353333626365333461396361 Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit: BPF prog-id=103 op=LOAD Dec 13 14:31:37.879000 audit[2534]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00033e4c8 items=0 ppid=2524 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:37.879000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666646661386538613637383666623734353333626365333461396361 Dec 13 14:31:37.879000 audit: BPF prog-id=103 op=UNLOAD Dec 13 14:31:37.879000 audit: BPF prog-id=102 op=UNLOAD Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.879000 audit: BPF prog-id=104 op=LOAD Dec 13 14:31:37.879000 audit[2534]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00033e8d8 items=0 ppid=2524 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:37.879000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666646661386538613637383666623734353333626365333461396361 Dec 13 14:31:37.889730 env[1414]: time="2024-12-13T14:31:37.889522103Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Dec 13 14:31:37.889915 env[1414]: time="2024-12-13T14:31:37.889717104Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Dec 13 14:31:37.889915 env[1414]: time="2024-12-13T14:31:37.889734104Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Dec 13 14:31:37.890073 env[1414]: time="2024-12-13T14:31:37.889932304Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/747e26f2accd901d99741f790214ca449a7c1332a7e4f2935a5079f50ca337ee pid=2558 runtime=io.containerd.runc.v2 Dec 13 14:31:37.901374 env[1414]: time="2024-12-13T14:31:37.901308144Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-cmx8x,Uid:af2dfe80-90b1-4f97-8fb6-0bceac859e5a,Namespace:kube-system,Attempt:0,} returns sandbox id \"ffdfa8e8a6786fb74533bce34a9caaf48e0500213d052d168f4334c8cb660627\"" Dec 13 14:31:37.906947 env[1414]: time="2024-12-13T14:31:37.906896663Z" level=info msg="CreateContainer within sandbox \"ffdfa8e8a6786fb74533bce34a9caaf48e0500213d052d168f4334c8cb660627\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Dec 13 14:31:37.918717 systemd[1]: Started cri-containerd-747e26f2accd901d99741f790214ca449a7c1332a7e4f2935a5079f50ca337ee.scope. Dec 13 14:31:37.932000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.932000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.932000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.932000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.932000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.932000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.932000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.932000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.932000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.932000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.932000 audit: BPF prog-id=105 op=LOAD Dec 13 14:31:37.933000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.933000 audit[2576]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2558 pid=2576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:37.933000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734376532366632616363643930316439393734316637393032313463 Dec 13 14:31:37.933000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.933000 audit[2576]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2558 pid=2576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:37.933000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734376532366632616363643930316439393734316637393032313463 Dec 13 14:31:37.933000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.933000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.933000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.933000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.933000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.933000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.933000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.933000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.933000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.933000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.933000 audit: BPF prog-id=106 op=LOAD Dec 13 14:31:37.933000 audit[2576]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000219210 items=0 ppid=2558 pid=2576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:37.933000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734376532366632616363643930316439393734316637393032313463 Dec 13 14:31:37.934000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.934000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.934000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.934000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.934000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.934000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.934000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.934000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.934000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.934000 audit: BPF prog-id=107 op=LOAD Dec 13 14:31:37.934000 audit[2576]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000219258 items=0 ppid=2558 pid=2576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:37.934000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734376532366632616363643930316439393734316637393032313463 Dec 13 14:31:37.934000 audit: BPF prog-id=107 op=UNLOAD Dec 13 14:31:37.935000 audit: BPF prog-id=106 op=UNLOAD Dec 13 14:31:37.935000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.935000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.935000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.935000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.935000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.935000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.935000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.935000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.935000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.935000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:37.935000 audit: BPF prog-id=108 op=LOAD Dec 13 14:31:37.935000 audit[2576]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000219668 items=0 ppid=2558 pid=2576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:37.935000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734376532366632616363643930316439393734316637393032313463 Dec 13 14:31:37.963415 env[1414]: time="2024-12-13T14:31:37.963368458Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-76c4976dd7-zfg7x,Uid:576e0c44-6bc3-44a9-8ee2-0d25e7dacce1,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"747e26f2accd901d99741f790214ca449a7c1332a7e4f2935a5079f50ca337ee\"" Dec 13 14:31:37.967093 env[1414]: time="2024-12-13T14:31:37.967043171Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.36.2\"" Dec 13 14:31:38.270177 env[1414]: time="2024-12-13T14:31:38.270117704Z" level=info msg="CreateContainer within sandbox \"ffdfa8e8a6786fb74533bce34a9caaf48e0500213d052d168f4334c8cb660627\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"0c313eea5de0e9019d6b7d7c3453c62fc30d318526f380a31e3c382bca6029eb\"" Dec 13 14:31:38.271646 env[1414]: time="2024-12-13T14:31:38.270937407Z" level=info msg="StartContainer for \"0c313eea5de0e9019d6b7d7c3453c62fc30d318526f380a31e3c382bca6029eb\"" Dec 13 14:31:38.290093 systemd[1]: Started cri-containerd-0c313eea5de0e9019d6b7d7c3453c62fc30d318526f380a31e3c382bca6029eb.scope. Dec 13 14:31:38.327957 kernel: kauditd_printk_skb: 117 callbacks suppressed Dec 13 14:31:38.328136 kernel: audit: type=1400 audit(1734100298.309:851): avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.309000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.309000 audit[2604]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7f4a9df9a2f8 items=0 ppid=2524 pid=2604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.348201 kernel: audit: type=1300 audit(1734100298.309:851): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7f4a9df9a2f8 items=0 ppid=2524 pid=2604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063333133656561356465306539303139643662376437633334353363 Dec 13 14:31:38.380774 kernel: audit: type=1327 audit(1734100298.309:851): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063333133656561356465306539303139643662376437633334353363 Dec 13 14:31:38.380931 kernel: audit: type=1400 audit(1734100298.309:852): avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.309000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.309000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.309000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.409331 kernel: audit: type=1400 audit(1734100298.309:852): avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.409474 kernel: audit: type=1400 audit(1734100298.309:852): avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.409501 kernel: audit: type=1400 audit(1734100298.309:852): avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.309000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.309000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.435857 kernel: audit: type=1400 audit(1734100298.309:852): avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.436014 kernel: audit: type=1400 audit(1734100298.309:852): avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.309000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.309000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.449577 kernel: audit: type=1400 audit(1734100298.309:852): avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.309000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.309000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.309000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.309000 audit: BPF prog-id=109 op=LOAD Dec 13 14:31:38.309000 audit[2604]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c000024238 items=0 ppid=2524 pid=2604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063333133656561356465306539303139643662376437633334353363 Dec 13 14:31:38.327000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.327000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.327000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.327000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.327000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.327000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.327000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.327000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.327000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.327000 audit: BPF prog-id=110 op=LOAD Dec 13 14:31:38.327000 audit[2604]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c000024288 items=0 ppid=2524 pid=2604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.327000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063333133656561356465306539303139643662376437633334353363 Dec 13 14:31:38.327000 audit: BPF prog-id=110 op=UNLOAD Dec 13 14:31:38.327000 audit: BPF prog-id=109 op=UNLOAD Dec 13 14:31:38.327000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.327000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.327000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.327000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.327000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.327000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.327000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.327000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.327000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.327000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:38.327000 audit: BPF prog-id=111 op=LOAD Dec 13 14:31:38.327000 audit[2604]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c000024318 items=0 ppid=2524 pid=2604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.327000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063333133656561356465306539303139643662376437633334353363 Dec 13 14:31:38.666456 env[1414]: time="2024-12-13T14:31:38.663998543Z" level=info msg="StartContainer for \"0c313eea5de0e9019d6b7d7c3453c62fc30d318526f380a31e3c382bca6029eb\" returns successfully" Dec 13 14:31:38.792000 audit[2661]: NETFILTER_CFG table=mangle:42 family=10 entries=1 op=nft_register_chain pid=2661 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 14:31:38.792000 audit[2661]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff1a1b25e0 a2=0 a3=7fff1a1b25cc items=0 ppid=2614 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.792000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Dec 13 14:31:38.795000 audit[2663]: NETFILTER_CFG table=mangle:43 family=2 entries=1 op=nft_register_chain pid=2663 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:38.795000 audit[2663]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcb667ec70 a2=0 a3=7ffcb667ec5c items=0 ppid=2614 pid=2663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.795000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Dec 13 14:31:38.797000 audit[2664]: NETFILTER_CFG table=nat:44 family=2 entries=1 op=nft_register_chain pid=2664 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:38.798000 audit[2662]: NETFILTER_CFG table=nat:45 family=10 entries=1 op=nft_register_chain pid=2662 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 14:31:38.797000 audit[2664]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc91ae7db0 a2=0 a3=7ffc91ae7d9c items=0 ppid=2614 pid=2664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.797000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Dec 13 14:31:38.798000 audit[2662]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc8fa113e0 a2=0 a3=7ffc8fa113cc items=0 ppid=2614 pid=2662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.798000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Dec 13 14:31:38.799000 audit[2665]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_chain pid=2665 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:38.799000 audit[2665]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdcee3a600 a2=0 a3=7ffdcee3a5ec items=0 ppid=2614 pid=2665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.799000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Dec 13 14:31:38.800000 audit[2666]: NETFILTER_CFG table=filter:47 family=10 entries=1 op=nft_register_chain pid=2666 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 14:31:38.800000 audit[2666]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffde24f29d0 a2=0 a3=7ffde24f29bc items=0 ppid=2614 pid=2666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.800000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Dec 13 14:31:38.895000 audit[2667]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_chain pid=2667 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:38.895000 audit[2667]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd9c300e60 a2=0 a3=7ffd9c300e4c items=0 ppid=2614 pid=2667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.895000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Dec 13 14:31:38.898000 audit[2669]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_rule pid=2669 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:38.898000 audit[2669]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc2fb78050 a2=0 a3=7ffc2fb7803c items=0 ppid=2614 pid=2669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.898000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Dec 13 14:31:38.902000 audit[2672]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2672 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:38.902000 audit[2672]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc702e21b0 a2=0 a3=7ffc702e219c items=0 ppid=2614 pid=2672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.902000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Dec 13 14:31:38.904000 audit[2673]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_chain pid=2673 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:38.904000 audit[2673]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc89fa76a0 a2=0 a3=7ffc89fa768c items=0 ppid=2614 pid=2673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.904000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Dec 13 14:31:38.907000 audit[2675]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_rule pid=2675 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:38.907000 audit[2675]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd9c0c62a0 a2=0 a3=7ffd9c0c628c items=0 ppid=2614 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.907000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Dec 13 14:31:38.909000 audit[2676]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_chain pid=2676 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:38.909000 audit[2676]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe599f8fa0 a2=0 a3=7ffe599f8f8c items=0 ppid=2614 pid=2676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.909000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Dec 13 14:31:38.911000 audit[2678]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_rule pid=2678 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:38.911000 audit[2678]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffdcda94410 a2=0 a3=7ffdcda943fc items=0 ppid=2614 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.911000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Dec 13 14:31:38.915000 audit[2681]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2681 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:38.915000 audit[2681]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc88fc30e0 a2=0 a3=7ffc88fc30cc items=0 ppid=2614 pid=2681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.915000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Dec 13 14:31:38.916000 audit[2682]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_chain pid=2682 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:38.916000 audit[2682]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd8fa85380 a2=0 a3=7ffd8fa8536c items=0 ppid=2614 pid=2682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.916000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Dec 13 14:31:38.919000 audit[2684]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2684 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:38.919000 audit[2684]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffca818b340 a2=0 a3=7ffca818b32c items=0 ppid=2614 pid=2684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.919000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Dec 13 14:31:38.920000 audit[2685]: NETFILTER_CFG table=filter:58 family=2 entries=1 op=nft_register_chain pid=2685 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:38.920000 audit[2685]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe347f0620 a2=0 a3=7ffe347f060c items=0 ppid=2614 pid=2685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.920000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Dec 13 14:31:38.923000 audit[2687]: NETFILTER_CFG table=filter:59 family=2 entries=1 op=nft_register_rule pid=2687 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:38.923000 audit[2687]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc673e03a0 a2=0 a3=7ffc673e038c items=0 ppid=2614 pid=2687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.923000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Dec 13 14:31:38.926000 audit[2690]: NETFILTER_CFG table=filter:60 family=2 entries=1 op=nft_register_rule pid=2690 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:38.926000 audit[2690]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc24b125c0 a2=0 a3=7ffc24b125ac items=0 ppid=2614 pid=2690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.926000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Dec 13 14:31:38.930000 audit[2693]: NETFILTER_CFG table=filter:61 family=2 entries=1 op=nft_register_rule pid=2693 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:38.930000 audit[2693]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff820a7f30 a2=0 a3=7fff820a7f1c items=0 ppid=2614 pid=2693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.930000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Dec 13 14:31:38.931000 audit[2694]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_chain pid=2694 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:38.931000 audit[2694]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe05a0fd70 a2=0 a3=7ffe05a0fd5c items=0 ppid=2614 pid=2694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.931000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Dec 13 14:31:38.934000 audit[2696]: NETFILTER_CFG table=nat:63 family=2 entries=1 op=nft_register_rule pid=2696 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:38.934000 audit[2696]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffd42e0c070 a2=0 a3=7ffd42e0c05c items=0 ppid=2614 pid=2696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.934000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Dec 13 14:31:38.937000 audit[2699]: NETFILTER_CFG table=nat:64 family=2 entries=1 op=nft_register_rule pid=2699 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:38.937000 audit[2699]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdd12e9330 a2=0 a3=7ffdd12e931c items=0 ppid=2614 pid=2699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.937000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Dec 13 14:31:38.938000 audit[2700]: NETFILTER_CFG table=nat:65 family=2 entries=1 op=nft_register_chain pid=2700 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:38.938000 audit[2700]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff457222f0 a2=0 a3=7fff457222dc items=0 ppid=2614 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.938000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Dec 13 14:31:38.941000 audit[2702]: NETFILTER_CFG table=nat:66 family=2 entries=1 op=nft_register_rule pid=2702 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 14:31:38.941000 audit[2702]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffdad5978b0 a2=0 a3=7ffdad59789c items=0 ppid=2614 pid=2702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:38.941000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Dec 13 14:31:39.092823 sudo[1841]: pam_unix(sudo:session): session closed for user root Dec 13 14:31:39.092000 audit[1841]: USER_END pid=1841 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Dec 13 14:31:39.092000 audit[1841]: CRED_DISP pid=1841 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Dec 13 14:31:39.130000 audit[2708]: NETFILTER_CFG table=filter:67 family=2 entries=8 op=nft_register_rule pid=2708 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:31:39.130000 audit[2708]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd94888ca0 a2=0 a3=7ffd94888c8c items=0 ppid=2614 pid=2708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:39.130000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:31:39.209131 sshd[1838]: pam_unix(sshd:session): session closed for user core Dec 13 14:31:39.211000 audit[1838]: USER_END pid=1838 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:31:39.211000 audit[1838]: CRED_DISP pid=1838 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:31:39.213000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.24:22-10.200.16.10:47608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:31:39.241000 audit[2708]: NETFILTER_CFG table=nat:68 family=2 entries=14 op=nft_register_chain pid=2708 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:31:39.241000 audit[2708]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffd94888ca0 a2=0 a3=7ffd94888c8c items=0 ppid=2614 pid=2708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:39.241000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:31:39.243000 audit[2729]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_chain pid=2729 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 14:31:39.243000 audit[2729]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe824fccf0 a2=0 a3=7ffe824fccdc items=0 ppid=2614 pid=2729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:39.243000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Dec 13 14:31:39.245000 audit[2731]: NETFILTER_CFG table=filter:70 family=10 entries=2 op=nft_register_chain pid=2731 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 14:31:39.245000 audit[2731]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd947f8020 a2=0 a3=7ffd947f800c items=0 ppid=2614 pid=2731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:39.245000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Dec 13 14:31:39.249000 audit[2734]: NETFILTER_CFG table=filter:71 family=10 entries=2 op=nft_register_chain pid=2734 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 14:31:39.249000 audit[2734]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffc3727f4a0 a2=0 a3=7ffc3727f48c items=0 ppid=2614 pid=2734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:39.249000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Dec 13 14:31:39.250000 audit[2735]: NETFILTER_CFG table=filter:72 family=10 entries=1 op=nft_register_chain pid=2735 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 14:31:39.250000 audit[2735]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd3f5e69a0 a2=0 a3=7ffd3f5e698c items=0 ppid=2614 pid=2735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:39.250000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Dec 13 14:31:39.253000 audit[2737]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_rule pid=2737 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 14:31:39.253000 audit[2737]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff8be45fe0 a2=0 a3=7fff8be45fcc items=0 ppid=2614 pid=2737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:39.253000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Dec 13 14:31:39.254000 audit[2738]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_chain pid=2738 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 14:31:39.254000 audit[2738]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc7d851110 a2=0 a3=7ffc7d8510fc items=0 ppid=2614 pid=2738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:39.254000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Dec 13 14:31:39.256000 audit[2740]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_rule pid=2740 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 14:31:39.256000 audit[2740]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff3d3500f0 a2=0 a3=7fff3d3500dc items=0 ppid=2614 pid=2740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:39.256000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Dec 13 14:31:39.260000 audit[2743]: NETFILTER_CFG table=filter:76 family=10 entries=2 op=nft_register_chain pid=2743 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 14:31:39.260000 audit[2743]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffd5f1f8ae0 a2=0 a3=7ffd5f1f8acc items=0 ppid=2614 pid=2743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:39.260000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Dec 13 14:31:39.261000 audit[2744]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_chain pid=2744 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 14:31:39.261000 audit[2744]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff5440b6f0 a2=0 a3=7fff5440b6dc items=0 ppid=2614 pid=2744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:39.261000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Dec 13 14:31:39.263000 audit[2746]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2746 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 14:31:39.263000 audit[2746]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd4bce56e0 a2=0 a3=7ffd4bce56cc items=0 ppid=2614 pid=2746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:39.263000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Dec 13 14:31:39.264000 audit[2747]: NETFILTER_CFG table=filter:79 family=10 entries=1 op=nft_register_chain pid=2747 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 14:31:39.264000 audit[2747]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd8b529a40 a2=0 a3=7ffd8b529a2c items=0 ppid=2614 pid=2747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:39.264000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Dec 13 14:31:39.267000 audit[2749]: NETFILTER_CFG table=filter:80 family=10 entries=1 op=nft_register_rule pid=2749 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 14:31:39.267000 audit[2749]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff5c85e5d0 a2=0 a3=7fff5c85e5bc items=0 ppid=2614 pid=2749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:39.267000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Dec 13 14:31:39.270000 audit[2752]: NETFILTER_CFG table=filter:81 family=10 entries=1 op=nft_register_rule pid=2752 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 14:31:39.270000 audit[2752]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffed8b1f620 a2=0 a3=7ffed8b1f60c items=0 ppid=2614 pid=2752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:39.270000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Dec 13 14:31:39.273000 audit[2755]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_rule pid=2755 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 14:31:39.273000 audit[2755]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff259548c0 a2=0 a3=7fff259548ac items=0 ppid=2614 pid=2755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:39.273000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Dec 13 14:31:39.274000 audit[2756]: NETFILTER_CFG table=nat:83 family=10 entries=1 op=nft_register_chain pid=2756 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 14:31:39.274000 audit[2756]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe791bc9d0 a2=0 a3=7ffe791bc9bc items=0 ppid=2614 pid=2756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:39.274000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Dec 13 14:31:39.276000 audit[2758]: NETFILTER_CFG table=nat:84 family=10 entries=2 op=nft_register_chain pid=2758 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 14:31:39.276000 audit[2758]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7fff3841b5c0 a2=0 a3=7fff3841b5ac items=0 ppid=2614 pid=2758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:39.276000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Dec 13 14:31:39.280000 audit[2761]: NETFILTER_CFG table=nat:85 family=10 entries=2 op=nft_register_chain pid=2761 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 14:31:39.280000 audit[2761]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffe5b865cf0 a2=0 a3=7ffe5b865cdc items=0 ppid=2614 pid=2761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:39.280000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Dec 13 14:31:39.281000 audit[2762]: NETFILTER_CFG table=nat:86 family=10 entries=1 op=nft_register_chain pid=2762 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 14:31:39.281000 audit[2762]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd453b58f0 a2=0 a3=7ffd453b58dc items=0 ppid=2614 pid=2762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:39.281000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Dec 13 14:31:39.283000 audit[2764]: NETFILTER_CFG table=nat:87 family=10 entries=2 op=nft_register_chain pid=2764 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 14:31:39.283000 audit[2764]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffe768f5a50 a2=0 a3=7ffe768f5a3c items=0 ppid=2614 pid=2764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:39.283000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Dec 13 14:31:39.285000 audit[2765]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_chain pid=2765 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 14:31:39.285000 audit[2765]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdd70918e0 a2=0 a3=7ffdd70918cc items=0 ppid=2614 pid=2765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:39.285000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Dec 13 14:31:39.288000 audit[2767]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_rule pid=2767 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 14:31:39.288000 audit[2767]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe62bcc720 a2=0 a3=7ffe62bcc70c items=0 ppid=2614 pid=2767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:39.288000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Dec 13 14:31:39.291000 audit[2770]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=2770 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 14:31:39.291000 audit[2770]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff2146b010 a2=0 a3=7fff2146affc items=0 ppid=2614 pid=2770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:39.291000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Dec 13 14:31:39.213869 systemd[1]: sshd@6-10.200.8.24:22-10.200.16.10:47608.service: Deactivated successfully. Dec 13 14:31:39.214800 systemd[1]: session-9.scope: Deactivated successfully. Dec 13 14:31:39.214942 systemd[1]: session-9.scope: Consumed 4.954s CPU time. Dec 13 14:31:39.567000 audit[2772]: NETFILTER_CFG table=filter:91 family=10 entries=3 op=nft_register_rule pid=2772 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Dec 13 14:31:39.567000 audit[2772]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffed36aa820 a2=0 a3=7ffed36aa80c items=0 ppid=2614 pid=2772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:39.567000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:31:39.215648 systemd-logind[1404]: Session 9 logged out. Waiting for processes to exit. Dec 13 14:31:39.216471 systemd-logind[1404]: Removed session 9. Dec 13 14:31:39.568000 audit[2772]: NETFILTER_CFG table=nat:92 family=10 entries=7 op=nft_register_chain pid=2772 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Dec 13 14:31:39.568000 audit[2772]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffed36aa820 a2=0 a3=7ffed36aa80c items=0 ppid=2614 pid=2772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:39.568000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:31:40.165065 kubelet[2458]: I1213 14:31:40.165002 2458 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-cmx8x" podStartSLOduration=7.16498207 podStartE2EDuration="7.16498207s" podCreationTimestamp="2024-12-13 14:31:33 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-12-13 14:31:39.363308 +0000 UTC m=+6.278295649" watchObservedRunningTime="2024-12-13 14:31:40.16498207 +0000 UTC m=+7.079969919" Dec 13 14:31:43.302493 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1030228645.mount: Deactivated successfully. Dec 13 14:31:43.995268 env[1414]: time="2024-12-13T14:31:43.995184730Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.36.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:44.002013 env[1414]: time="2024-12-13T14:31:44.001964851Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3045aa4a360d468ed15090f280e94c54bf4678269a6e863a9ebcf5b31534a346,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:44.006947 env[1414]: time="2024-12-13T14:31:44.006903666Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.36.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:44.011525 env[1414]: time="2024-12-13T14:31:44.011485781Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:fc9ea45f2475fd99db1b36d2ff180a50017b1a5ea0e82a171c6b439b3a620764,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:44.012023 env[1414]: time="2024-12-13T14:31:44.011985082Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.36.2\" returns image reference \"sha256:3045aa4a360d468ed15090f280e94c54bf4678269a6e863a9ebcf5b31534a346\"" Dec 13 14:31:44.015912 env[1414]: time="2024-12-13T14:31:44.015877894Z" level=info msg="CreateContainer within sandbox \"747e26f2accd901d99741f790214ca449a7c1332a7e4f2935a5079f50ca337ee\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Dec 13 14:31:44.042341 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1743490298.mount: Deactivated successfully. Dec 13 14:31:44.054649 env[1414]: time="2024-12-13T14:31:44.054591813Z" level=info msg="CreateContainer within sandbox \"747e26f2accd901d99741f790214ca449a7c1332a7e4f2935a5079f50ca337ee\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"a78909ccdc78145ebf92fdbcb1de0384335e641cac51ab45db6f01c617f7714e\"" Dec 13 14:31:44.056526 env[1414]: time="2024-12-13T14:31:44.055460016Z" level=info msg="StartContainer for \"a78909ccdc78145ebf92fdbcb1de0384335e641cac51ab45db6f01c617f7714e\"" Dec 13 14:31:44.072773 systemd[1]: Started cri-containerd-a78909ccdc78145ebf92fdbcb1de0384335e641cac51ab45db6f01c617f7714e.scope. Dec 13 14:31:44.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.104759 kernel: kauditd_printk_skb: 191 callbacks suppressed Dec 13 14:31:44.104875 kernel: audit: type=1400 audit(1734100304.098:913): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.132178 kernel: audit: type=1400 audit(1734100304.098:914): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.145437 kernel: audit: type=1400 audit(1734100304.098:915): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.160061 kernel: audit: type=1400 audit(1734100304.098:916): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.160162 kernel: audit: type=1400 audit(1734100304.098:917): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.172585 kernel: audit: type=1400 audit(1734100304.098:918): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.212057 kernel: audit: type=1400 audit(1734100304.098:919): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.212221 kernel: audit: type=1400 audit(1734100304.098:920): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.212264 kernel: audit: type=1400 audit(1734100304.098:921): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.236254 kernel: audit: type=1400 audit(1734100304.098:922): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.098000 audit: BPF prog-id=112 op=LOAD Dec 13 14:31:44.113000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.113000 audit[2782]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2558 pid=2782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:44.113000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137383930396363646337383134356562663932666462636231646530 Dec 13 14:31:44.113000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.113000 audit[2782]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2558 pid=2782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:44.113000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137383930396363646337383134356562663932666462636231646530 Dec 13 14:31:44.113000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.113000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.113000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.113000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.113000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.113000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.113000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.113000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.113000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.113000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.113000 audit: BPF prog-id=113 op=LOAD Dec 13 14:31:44.113000 audit[2782]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000dfd10 items=0 ppid=2558 pid=2782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:44.113000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137383930396363646337383134356562663932666462636231646530 Dec 13 14:31:44.131000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.131000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.131000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.131000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.131000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.131000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.131000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.131000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.131000 audit[2782]: SYSCALL arch=c000003e syscall=321 success=no exit=-11 a0=5 a1=c000197770 a2=78 a3=c0000dfd58 items=0 ppid=2558 pid=2782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:44.131000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137383930396363646337383134356562663932666462636231646530 Dec 13 14:31:44.132000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.132000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.132000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.132000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.132000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.132000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.132000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.132000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.132000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.132000 audit: BPF prog-id=114 op=LOAD Dec 13 14:31:44.132000 audit[2782]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=1 items=0 ppid=2558 pid=2782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:44.132000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137383930396363646337383134356562663932666462636231646530 Dec 13 14:31:44.145000 audit: BPF prog-id=114 op=UNLOAD Dec 13 14:31:44.145000 audit: BPF prog-id=113 op=UNLOAD Dec 13 14:31:44.145000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.145000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.145000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.145000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.145000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.145000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.145000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.145000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.145000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.145000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:44.145000 audit: BPF prog-id=115 op=LOAD Dec 13 14:31:44.145000 audit[2782]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000348168 items=0 ppid=2558 pid=2782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:44.145000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137383930396363646337383134356562663932666462636231646530 Dec 13 14:31:44.262656 env[1414]: time="2024-12-13T14:31:44.259447843Z" level=info msg="StartContainer for \"a78909ccdc78145ebf92fdbcb1de0384335e641cac51ab45db6f01c617f7714e\" returns successfully" Dec 13 14:31:44.372765 kubelet[2458]: I1213 14:31:44.372681 2458 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-76c4976dd7-zfg7x" podStartSLOduration=2.324308568 podStartE2EDuration="8.372653491s" podCreationTimestamp="2024-12-13 14:31:36 +0000 UTC" firstStartedPulling="2024-12-13 14:31:37.964793663 +0000 UTC m=+4.879781312" lastFinishedPulling="2024-12-13 14:31:44.013138586 +0000 UTC m=+10.928126235" observedRunningTime="2024-12-13 14:31:44.37222399 +0000 UTC m=+11.287211639" watchObservedRunningTime="2024-12-13 14:31:44.372653491 +0000 UTC m=+11.287641140" Dec 13 14:31:47.448000 audit[2813]: NETFILTER_CFG table=filter:93 family=2 entries=15 op=nft_register_rule pid=2813 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:31:47.448000 audit[2813]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffddb4bd190 a2=0 a3=7ffddb4bd17c items=0 ppid=2614 pid=2813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:47.448000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:31:47.452000 audit[2813]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2813 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:31:47.452000 audit[2813]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffddb4bd190 a2=0 a3=0 items=0 ppid=2614 pid=2813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:47.452000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:31:47.462000 audit[2815]: NETFILTER_CFG table=filter:95 family=2 entries=16 op=nft_register_rule pid=2815 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:31:47.462000 audit[2815]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffcc7d30470 a2=0 a3=7ffcc7d3045c items=0 ppid=2614 pid=2815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:47.462000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:31:47.466000 audit[2815]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2815 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:31:47.466000 audit[2815]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffcc7d30470 a2=0 a3=0 items=0 ppid=2614 pid=2815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:47.466000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:31:47.610738 systemd[1]: Created slice kubepods-besteffort-pod36145a65_f24e_46df_bc41_9855b657accf.slice. Dec 13 14:31:47.669673 kubelet[2458]: I1213 14:31:47.669608 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/36145a65-f24e-46df-bc41-9855b657accf-tigera-ca-bundle\") pod \"calico-typha-55c5f89d89-tdcb7\" (UID: \"36145a65-f24e-46df-bc41-9855b657accf\") " pod="calico-system/calico-typha-55c5f89d89-tdcb7" Dec 13 14:31:47.669673 kubelet[2458]: I1213 14:31:47.669680 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xvb2w\" (UniqueName: \"kubernetes.io/projected/36145a65-f24e-46df-bc41-9855b657accf-kube-api-access-xvb2w\") pod \"calico-typha-55c5f89d89-tdcb7\" (UID: \"36145a65-f24e-46df-bc41-9855b657accf\") " pod="calico-system/calico-typha-55c5f89d89-tdcb7" Dec 13 14:31:47.670248 kubelet[2458]: I1213 14:31:47.669724 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/36145a65-f24e-46df-bc41-9855b657accf-typha-certs\") pod \"calico-typha-55c5f89d89-tdcb7\" (UID: \"36145a65-f24e-46df-bc41-9855b657accf\") " pod="calico-system/calico-typha-55c5f89d89-tdcb7" Dec 13 14:31:47.758907 systemd[1]: Created slice kubepods-besteffort-pod649f0db6_08d0_42df_af8f_bab1b7d4c727.slice. Dec 13 14:31:47.764779 kubelet[2458]: W1213 14:31:47.764747 2458 reflector.go:561] object-"calico-system"/"node-certs": failed to list *v1.Secret: secrets "node-certs" is forbidden: User "system:node:ci-3510.3.6-a-f6adf0345d" cannot list resource "secrets" in API group "" in the namespace "calico-system": no relationship found between node 'ci-3510.3.6-a-f6adf0345d' and this object Dec 13 14:31:47.765810 kubelet[2458]: W1213 14:31:47.765015 2458 reflector.go:561] object-"calico-system"/"cni-config": failed to list *v1.ConfigMap: configmaps "cni-config" is forbidden: User "system:node:ci-3510.3.6-a-f6adf0345d" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'ci-3510.3.6-a-f6adf0345d' and this object Dec 13 14:31:47.765975 kubelet[2458]: E1213 14:31:47.765927 2458 reflector.go:158] "Unhandled Error" err="object-\"calico-system\"/\"node-certs\": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets \"node-certs\" is forbidden: User \"system:node:ci-3510.3.6-a-f6adf0345d\" cannot list resource \"secrets\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ci-3510.3.6-a-f6adf0345d' and this object" logger="UnhandledError" Dec 13 14:31:47.766119 kubelet[2458]: E1213 14:31:47.766067 2458 reflector.go:158] "Unhandled Error" err="object-\"calico-system\"/\"cni-config\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"cni-config\" is forbidden: User \"system:node:ci-3510.3.6-a-f6adf0345d\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ci-3510.3.6-a-f6adf0345d' and this object" logger="UnhandledError" Dec 13 14:31:47.871304 kubelet[2458]: I1213 14:31:47.871263 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/649f0db6-08d0-42df-af8f-bab1b7d4c727-node-certs\") pod \"calico-node-pcc4p\" (UID: \"649f0db6-08d0-42df-af8f-bab1b7d4c727\") " pod="calico-system/calico-node-pcc4p" Dec 13 14:31:47.871304 kubelet[2458]: I1213 14:31:47.871312 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-cni-net-dir\") pod \"calico-node-pcc4p\" (UID: \"649f0db6-08d0-42df-af8f-bab1b7d4c727\") " pod="calico-system/calico-node-pcc4p" Dec 13 14:31:47.871567 kubelet[2458]: I1213 14:31:47.871344 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-cni-bin-dir\") pod \"calico-node-pcc4p\" (UID: \"649f0db6-08d0-42df-af8f-bab1b7d4c727\") " pod="calico-system/calico-node-pcc4p" Dec 13 14:31:47.871567 kubelet[2458]: I1213 14:31:47.871365 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-cni-log-dir\") pod \"calico-node-pcc4p\" (UID: \"649f0db6-08d0-42df-af8f-bab1b7d4c727\") " pod="calico-system/calico-node-pcc4p" Dec 13 14:31:47.871567 kubelet[2458]: I1213 14:31:47.871387 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-xtables-lock\") pod \"calico-node-pcc4p\" (UID: \"649f0db6-08d0-42df-af8f-bab1b7d4c727\") " pod="calico-system/calico-node-pcc4p" Dec 13 14:31:47.871567 kubelet[2458]: I1213 14:31:47.871405 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-var-lib-calico\") pod \"calico-node-pcc4p\" (UID: \"649f0db6-08d0-42df-af8f-bab1b7d4c727\") " pod="calico-system/calico-node-pcc4p" Dec 13 14:31:47.871567 kubelet[2458]: I1213 14:31:47.871424 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-policysync\") pod \"calico-node-pcc4p\" (UID: \"649f0db6-08d0-42df-af8f-bab1b7d4c727\") " pod="calico-system/calico-node-pcc4p" Dec 13 14:31:47.871755 kubelet[2458]: I1213 14:31:47.871445 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-flexvol-driver-host\") pod \"calico-node-pcc4p\" (UID: \"649f0db6-08d0-42df-af8f-bab1b7d4c727\") " pod="calico-system/calico-node-pcc4p" Dec 13 14:31:47.871755 kubelet[2458]: I1213 14:31:47.871468 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/649f0db6-08d0-42df-af8f-bab1b7d4c727-tigera-ca-bundle\") pod \"calico-node-pcc4p\" (UID: \"649f0db6-08d0-42df-af8f-bab1b7d4c727\") " pod="calico-system/calico-node-pcc4p" Dec 13 14:31:47.871755 kubelet[2458]: I1213 14:31:47.871490 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-lib-modules\") pod \"calico-node-pcc4p\" (UID: \"649f0db6-08d0-42df-af8f-bab1b7d4c727\") " pod="calico-system/calico-node-pcc4p" Dec 13 14:31:47.871755 kubelet[2458]: I1213 14:31:47.871511 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-var-run-calico\") pod \"calico-node-pcc4p\" (UID: \"649f0db6-08d0-42df-af8f-bab1b7d4c727\") " pod="calico-system/calico-node-pcc4p" Dec 13 14:31:47.871755 kubelet[2458]: I1213 14:31:47.871532 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pvrk6\" (UniqueName: \"kubernetes.io/projected/649f0db6-08d0-42df-af8f-bab1b7d4c727-kube-api-access-pvrk6\") pod \"calico-node-pcc4p\" (UID: \"649f0db6-08d0-42df-af8f-bab1b7d4c727\") " pod="calico-system/calico-node-pcc4p" Dec 13 14:31:47.915989 env[1414]: time="2024-12-13T14:31:47.915935115Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-55c5f89d89-tdcb7,Uid:36145a65-f24e-46df-bc41-9855b657accf,Namespace:calico-system,Attempt:0,}" Dec 13 14:31:47.937898 kubelet[2458]: E1213 14:31:47.937848 2458 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5fclm" podUID="97d535fd-6d62-48fb-8a31-b56e5e376a53" Dec 13 14:31:47.972811 kubelet[2458]: I1213 14:31:47.972757 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/97d535fd-6d62-48fb-8a31-b56e5e376a53-kubelet-dir\") pod \"csi-node-driver-5fclm\" (UID: \"97d535fd-6d62-48fb-8a31-b56e5e376a53\") " pod="calico-system/csi-node-driver-5fclm" Dec 13 14:31:47.972811 kubelet[2458]: I1213 14:31:47.972811 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/97d535fd-6d62-48fb-8a31-b56e5e376a53-registration-dir\") pod \"csi-node-driver-5fclm\" (UID: \"97d535fd-6d62-48fb-8a31-b56e5e376a53\") " pod="calico-system/csi-node-driver-5fclm" Dec 13 14:31:47.973054 kubelet[2458]: I1213 14:31:47.972838 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/97d535fd-6d62-48fb-8a31-b56e5e376a53-socket-dir\") pod \"csi-node-driver-5fclm\" (UID: \"97d535fd-6d62-48fb-8a31-b56e5e376a53\") " pod="calico-system/csi-node-driver-5fclm" Dec 13 14:31:47.973054 kubelet[2458]: I1213 14:31:47.972860 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tswpl\" (UniqueName: \"kubernetes.io/projected/97d535fd-6d62-48fb-8a31-b56e5e376a53-kube-api-access-tswpl\") pod \"csi-node-driver-5fclm\" (UID: \"97d535fd-6d62-48fb-8a31-b56e5e376a53\") " pod="calico-system/csi-node-driver-5fclm" Dec 13 14:31:47.973054 kubelet[2458]: I1213 14:31:47.972978 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/97d535fd-6d62-48fb-8a31-b56e5e376a53-varrun\") pod \"csi-node-driver-5fclm\" (UID: \"97d535fd-6d62-48fb-8a31-b56e5e376a53\") " pod="calico-system/csi-node-driver-5fclm" Dec 13 14:31:47.975186 kubelet[2458]: E1213 14:31:47.975144 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:47.975186 kubelet[2458]: W1213 14:31:47.975173 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:47.975374 kubelet[2458]: E1213 14:31:47.975205 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.005932 kubelet[2458]: E1213 14:31:48.002106 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.005932 kubelet[2458]: W1213 14:31:48.002131 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.005932 kubelet[2458]: E1213 14:31:48.002161 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.074192 kubelet[2458]: E1213 14:31:48.074071 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.074192 kubelet[2458]: W1213 14:31:48.074105 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.074192 kubelet[2458]: E1213 14:31:48.074133 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.074470 kubelet[2458]: E1213 14:31:48.074388 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.074470 kubelet[2458]: W1213 14:31:48.074400 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.074470 kubelet[2458]: E1213 14:31:48.074441 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.075921 kubelet[2458]: E1213 14:31:48.074726 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.075921 kubelet[2458]: W1213 14:31:48.074741 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.075921 kubelet[2458]: E1213 14:31:48.074758 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.075921 kubelet[2458]: E1213 14:31:48.075267 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.075921 kubelet[2458]: W1213 14:31:48.075320 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.075921 kubelet[2458]: E1213 14:31:48.075338 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.075921 kubelet[2458]: E1213 14:31:48.075716 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.075921 kubelet[2458]: W1213 14:31:48.075728 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.075921 kubelet[2458]: E1213 14:31:48.075746 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.076404 kubelet[2458]: E1213 14:31:48.076031 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.076404 kubelet[2458]: W1213 14:31:48.076043 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.076404 kubelet[2458]: E1213 14:31:48.076060 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.076404 kubelet[2458]: E1213 14:31:48.076272 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.076404 kubelet[2458]: W1213 14:31:48.076282 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.076404 kubelet[2458]: E1213 14:31:48.076378 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.076695 kubelet[2458]: E1213 14:31:48.076506 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.076695 kubelet[2458]: W1213 14:31:48.076515 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.076695 kubelet[2458]: E1213 14:31:48.076574 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.076821 kubelet[2458]: E1213 14:31:48.076738 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.076821 kubelet[2458]: W1213 14:31:48.076747 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.076920 kubelet[2458]: E1213 14:31:48.076823 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.076989 kubelet[2458]: E1213 14:31:48.076965 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.077037 kubelet[2458]: W1213 14:31:48.076990 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.077089 kubelet[2458]: E1213 14:31:48.077073 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.077284 kubelet[2458]: E1213 14:31:48.077267 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.077284 kubelet[2458]: W1213 14:31:48.077283 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.077403 kubelet[2458]: E1213 14:31:48.077300 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.077508 kubelet[2458]: E1213 14:31:48.077492 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.077580 kubelet[2458]: W1213 14:31:48.077508 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.077580 kubelet[2458]: E1213 14:31:48.077523 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.077770 kubelet[2458]: E1213 14:31:48.077754 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.077770 kubelet[2458]: W1213 14:31:48.077769 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.077861 kubelet[2458]: E1213 14:31:48.077785 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.078063 kubelet[2458]: E1213 14:31:48.078047 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.078063 kubelet[2458]: W1213 14:31:48.078062 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.078170 kubelet[2458]: E1213 14:31:48.078138 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.078276 kubelet[2458]: E1213 14:31:48.078262 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.078327 kubelet[2458]: W1213 14:31:48.078276 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.078374 kubelet[2458]: E1213 14:31:48.078352 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.078521 kubelet[2458]: E1213 14:31:48.078506 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.078590 kubelet[2458]: W1213 14:31:48.078521 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.078590 kubelet[2458]: E1213 14:31:48.078571 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.078757 kubelet[2458]: E1213 14:31:48.078742 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.078824 kubelet[2458]: W1213 14:31:48.078757 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.078942 kubelet[2458]: E1213 14:31:48.078839 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.078995 kubelet[2458]: E1213 14:31:48.078961 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.078995 kubelet[2458]: W1213 14:31:48.078970 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.078995 kubelet[2458]: E1213 14:31:48.078985 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.079185 kubelet[2458]: E1213 14:31:48.079171 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.079241 kubelet[2458]: W1213 14:31:48.079185 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.079241 kubelet[2458]: E1213 14:31:48.079200 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.079400 kubelet[2458]: E1213 14:31:48.079386 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.079400 kubelet[2458]: W1213 14:31:48.079400 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.079483 kubelet[2458]: E1213 14:31:48.079415 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.079832 kubelet[2458]: E1213 14:31:48.079815 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.079832 kubelet[2458]: W1213 14:31:48.079831 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.079966 kubelet[2458]: E1213 14:31:48.079919 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.080070 kubelet[2458]: E1213 14:31:48.080055 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.080124 kubelet[2458]: W1213 14:31:48.080071 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.080166 kubelet[2458]: E1213 14:31:48.080150 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.080278 kubelet[2458]: E1213 14:31:48.080265 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.080331 kubelet[2458]: W1213 14:31:48.080278 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.080331 kubelet[2458]: E1213 14:31:48.080293 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.080601 kubelet[2458]: E1213 14:31:48.080562 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.080601 kubelet[2458]: W1213 14:31:48.080582 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.080704 kubelet[2458]: E1213 14:31:48.080614 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.080818 kubelet[2458]: E1213 14:31:48.080802 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.080865 kubelet[2458]: W1213 14:31:48.080818 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.080865 kubelet[2458]: E1213 14:31:48.080830 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.081066 kubelet[2458]: E1213 14:31:48.081047 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.081124 kubelet[2458]: W1213 14:31:48.081099 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.081124 kubelet[2458]: E1213 14:31:48.081114 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.117144 kubelet[2458]: E1213 14:31:48.117094 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.117144 kubelet[2458]: W1213 14:31:48.117134 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.117362 kubelet[2458]: E1213 14:31:48.117156 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.172905 env[1414]: time="2024-12-13T14:31:48.171682558Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Dec 13 14:31:48.172905 env[1414]: time="2024-12-13T14:31:48.171734958Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Dec 13 14:31:48.172905 env[1414]: time="2024-12-13T14:31:48.171751258Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Dec 13 14:31:48.172905 env[1414]: time="2024-12-13T14:31:48.171899759Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/dec69fb3890cbf52f6b2c749d651817db79183771fd686abfe3d8dd3df856b72 pid=2856 runtime=io.containerd.runc.v2 Dec 13 14:31:48.179254 kubelet[2458]: E1213 14:31:48.179199 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.179254 kubelet[2458]: W1213 14:31:48.179248 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.179497 kubelet[2458]: E1213 14:31:48.179278 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.192286 systemd[1]: Started cri-containerd-dec69fb3890cbf52f6b2c749d651817db79183771fd686abfe3d8dd3df856b72.scope. Dec 13 14:31:48.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.208000 audit: BPF prog-id=116 op=LOAD Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit[2863]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2856 pid=2863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:48.209000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465633639666233383930636266353266366232633734396436353138 Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit[2863]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2856 pid=2863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:48.209000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465633639666233383930636266353266366232633734396436353138 Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit: BPF prog-id=117 op=LOAD Dec 13 14:31:48.209000 audit[2863]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00021a170 items=0 ppid=2856 pid=2863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:48.209000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465633639666233383930636266353266366232633734396436353138 Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit: BPF prog-id=118 op=LOAD Dec 13 14:31:48.209000 audit[2863]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00021a1b8 items=0 ppid=2856 pid=2863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:48.209000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465633639666233383930636266353266366232633734396436353138 Dec 13 14:31:48.209000 audit: BPF prog-id=118 op=UNLOAD Dec 13 14:31:48.209000 audit: BPF prog-id=117 op=UNLOAD Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:48.209000 audit: BPF prog-id=119 op=LOAD Dec 13 14:31:48.209000 audit[2863]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00021a5c8 items=0 ppid=2856 pid=2863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:48.209000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465633639666233383930636266353266366232633734396436353138 Dec 13 14:31:48.280619 kubelet[2458]: E1213 14:31:48.280578 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.280619 kubelet[2458]: W1213 14:31:48.280611 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.280851 kubelet[2458]: E1213 14:31:48.280638 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.382714 kubelet[2458]: E1213 14:31:48.382593 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.382714 kubelet[2458]: W1213 14:31:48.382622 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.382714 kubelet[2458]: E1213 14:31:48.382648 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.401551 env[1414]: time="2024-12-13T14:31:48.401500422Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-55c5f89d89-tdcb7,Uid:36145a65-f24e-46df-bc41-9855b657accf,Namespace:calico-system,Attempt:0,} returns sandbox id \"dec69fb3890cbf52f6b2c749d651817db79183771fd686abfe3d8dd3df856b72\"" Dec 13 14:31:48.403381 env[1414]: time="2024-12-13T14:31:48.403348528Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.29.1\"" Dec 13 14:31:48.478000 audit[2891]: NETFILTER_CFG table=filter:97 family=2 entries=17 op=nft_register_rule pid=2891 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:31:48.478000 audit[2891]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffe64c020f0 a2=0 a3=7ffe64c020dc items=0 ppid=2614 pid=2891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:48.478000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:31:48.483781 kubelet[2458]: E1213 14:31:48.483663 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.483781 kubelet[2458]: W1213 14:31:48.483692 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.483781 kubelet[2458]: E1213 14:31:48.483721 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.484000 audit[2891]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2891 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:31:48.484000 audit[2891]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe64c020f0 a2=0 a3=0 items=0 ppid=2614 pid=2891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:48.484000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:31:48.584934 kubelet[2458]: E1213 14:31:48.584898 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.584934 kubelet[2458]: W1213 14:31:48.584924 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.585152 kubelet[2458]: E1213 14:31:48.584953 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.686053 kubelet[2458]: E1213 14:31:48.685943 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.686053 kubelet[2458]: W1213 14:31:48.685966 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.686053 kubelet[2458]: E1213 14:31:48.685993 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.779472 kubelet[2458]: E1213 14:31:48.779440 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:48.779681 kubelet[2458]: W1213 14:31:48.779663 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:48.779799 kubelet[2458]: E1213 14:31:48.779780 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:48.968210 env[1414]: time="2024-12-13T14:31:48.968172460Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-pcc4p,Uid:649f0db6-08d0-42df-af8f-bab1b7d4c727,Namespace:calico-system,Attempt:0,}" Dec 13 14:31:49.170752 env[1414]: time="2024-12-13T14:31:49.170215137Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Dec 13 14:31:49.170752 env[1414]: time="2024-12-13T14:31:49.170303637Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Dec 13 14:31:49.170752 env[1414]: time="2024-12-13T14:31:49.170333437Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Dec 13 14:31:49.171734 env[1414]: time="2024-12-13T14:31:49.171060239Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/20a2c38c124635dc9b01a2156cc8850ddca570a0a82a40705df1a0aa9cff962e pid=2903 runtime=io.containerd.runc.v2 Dec 13 14:31:49.193911 systemd[1]: Started cri-containerd-20a2c38c124635dc9b01a2156cc8850ddca570a0a82a40705df1a0aa9cff962e.scope. Dec 13 14:31:49.208601 kernel: kauditd_printk_skb: 132 callbacks suppressed Dec 13 14:31:49.208688 kernel: audit: type=1400 audit(1734100309.203:956): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.238570 kernel: audit: type=1400 audit(1734100309.203:957): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.252749 env[1414]: time="2024-12-13T14:31:49.248812761Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-pcc4p,Uid:649f0db6-08d0-42df-af8f-bab1b7d4c727,Namespace:calico-system,Attempt:0,} returns sandbox id \"20a2c38c124635dc9b01a2156cc8850ddca570a0a82a40705df1a0aa9cff962e\"" Dec 13 14:31:49.253590 kernel: audit: type=1400 audit(1734100309.203:958): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.268644 kernel: audit: type=1400 audit(1734100309.203:959): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.281566 kernel: audit: type=1400 audit(1734100309.203:960): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.288701 kubelet[2458]: E1213 14:31:49.285572 2458 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5fclm" podUID="97d535fd-6d62-48fb-8a31-b56e5e376a53" Dec 13 14:31:49.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.306649 kernel: audit: type=1400 audit(1734100309.203:961): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.306743 kernel: audit: type=1400 audit(1734100309.203:962): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.306766 kernel: audit: type=1400 audit(1734100309.203:963): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.319624 kernel: audit: type=1400 audit(1734100309.203:964): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.344226 kernel: audit: type=1400 audit(1734100309.208:965): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.208000 audit: BPF prog-id=120 op=LOAD Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit[2914]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2903 pid=2914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:49.221000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230613263333863313234363335646339623031613231353663633838 Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit[2914]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2903 pid=2914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:49.221000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230613263333863313234363335646339623031613231353663633838 Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit: BPF prog-id=121 op=LOAD Dec 13 14:31:49.221000 audit[2914]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002109b0 items=0 ppid=2903 pid=2914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:49.221000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230613263333863313234363335646339623031613231353663633838 Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit: BPF prog-id=122 op=LOAD Dec 13 14:31:49.221000 audit[2914]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002109f8 items=0 ppid=2903 pid=2914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:49.221000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230613263333863313234363335646339623031613231353663633838 Dec 13 14:31:49.221000 audit: BPF prog-id=122 op=UNLOAD Dec 13 14:31:49.221000 audit: BPF prog-id=121 op=UNLOAD Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:49.221000 audit: BPF prog-id=123 op=LOAD Dec 13 14:31:49.221000 audit[2914]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000210e08 items=0 ppid=2903 pid=2914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:49.221000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230613263333863313234363335646339623031613231353663633838 Dec 13 14:31:51.284607 kubelet[2458]: E1213 14:31:51.283954 2458 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5fclm" podUID="97d535fd-6d62-48fb-8a31-b56e5e376a53" Dec 13 14:31:51.818983 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3916173833.mount: Deactivated successfully. Dec 13 14:31:53.105583 env[1414]: time="2024-12-13T14:31:53.105507884Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:53.173182 env[1414]: time="2024-12-13T14:31:53.171451062Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4cb3738506f5a9c530033d1e24fd6b9ec618518a2ec8b012ded33572be06ab44,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:53.214577 env[1414]: time="2024-12-13T14:31:53.214504378Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:53.262537 env[1414]: time="2024-12-13T14:31:53.262474407Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:768a194e1115c73bcbf35edb7afd18a63e16e08d940c79993565b6a3cca2da7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:53.263267 env[1414]: time="2024-12-13T14:31:53.263217009Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.29.1\" returns image reference \"sha256:4cb3738506f5a9c530033d1e24fd6b9ec618518a2ec8b012ded33572be06ab44\"" Dec 13 14:31:53.268011 env[1414]: time="2024-12-13T14:31:53.267685021Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.29.1\"" Dec 13 14:31:53.284158 env[1414]: time="2024-12-13T14:31:53.282384060Z" level=info msg="CreateContainer within sandbox \"dec69fb3890cbf52f6b2c749d651817db79183771fd686abfe3d8dd3df856b72\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Dec 13 14:31:53.286781 kubelet[2458]: E1213 14:31:53.286749 2458 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5fclm" podUID="97d535fd-6d62-48fb-8a31-b56e5e376a53" Dec 13 14:31:53.913361 env[1414]: time="2024-12-13T14:31:53.913303657Z" level=info msg="CreateContainer within sandbox \"dec69fb3890cbf52f6b2c749d651817db79183771fd686abfe3d8dd3df856b72\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"9db45fac40121283996d4cd6bd76d1c2fd7e5e300a47596ffaf4368e7c591ade\"" Dec 13 14:31:53.914265 env[1414]: time="2024-12-13T14:31:53.914224760Z" level=info msg="StartContainer for \"9db45fac40121283996d4cd6bd76d1c2fd7e5e300a47596ffaf4368e7c591ade\"" Dec 13 14:31:53.980618 systemd[1]: Started cri-containerd-9db45fac40121283996d4cd6bd76d1c2fd7e5e300a47596ffaf4368e7c591ade.scope. Dec 13 14:31:54.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit: BPF prog-id=124 op=LOAD Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { bpf } for pid=2946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit[2946]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2856 pid=2946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:54.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964623435666163343031323132383339393664346364366264373664 Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { perfmon } for pid=2946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit[2946]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2856 pid=2946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:54.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964623435666163343031323132383339393664346364366264373664 Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { bpf } for pid=2946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { bpf } for pid=2946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { bpf } for pid=2946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { perfmon } for pid=2946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { perfmon } for pid=2946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { perfmon } for pid=2946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { perfmon } for pid=2946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { perfmon } for pid=2946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { bpf } for pid=2946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { bpf } for pid=2946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit: BPF prog-id=125 op=LOAD Dec 13 14:31:54.012000 audit[2946]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002140c0 items=0 ppid=2856 pid=2946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:54.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964623435666163343031323132383339393664346364366264373664 Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { bpf } for pid=2946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { bpf } for pid=2946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { perfmon } for pid=2946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { perfmon } for pid=2946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { perfmon } for pid=2946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { perfmon } for pid=2946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { perfmon } for pid=2946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { bpf } for pid=2946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { bpf } for pid=2946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit: BPF prog-id=126 op=LOAD Dec 13 14:31:54.012000 audit[2946]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000214108 items=0 ppid=2856 pid=2946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:54.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964623435666163343031323132383339393664346364366264373664 Dec 13 14:31:54.012000 audit: BPF prog-id=126 op=UNLOAD Dec 13 14:31:54.012000 audit: BPF prog-id=125 op=UNLOAD Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { bpf } for pid=2946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { bpf } for pid=2946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { bpf } for pid=2946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { perfmon } for pid=2946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { perfmon } for pid=2946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { perfmon } for pid=2946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { perfmon } for pid=2946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { perfmon } for pid=2946 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { bpf } for pid=2946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit[2946]: AVC avc: denied { bpf } for pid=2946 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:54.012000 audit: BPF prog-id=127 op=LOAD Dec 13 14:31:54.012000 audit[2946]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000214518 items=0 ppid=2856 pid=2946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:54.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964623435666163343031323132383339393664346364366264373664 Dec 13 14:31:54.051797 env[1414]: time="2024-12-13T14:31:54.051742128Z" level=info msg="StartContainer for \"9db45fac40121283996d4cd6bd76d1c2fd7e5e300a47596ffaf4368e7c591ade\" returns successfully" Dec 13 14:31:54.393429 kubelet[2458]: E1213 14:31:54.393386 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.393429 kubelet[2458]: W1213 14:31:54.393410 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.393429 kubelet[2458]: E1213 14:31:54.393433 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.394095 kubelet[2458]: E1213 14:31:54.393694 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.394095 kubelet[2458]: W1213 14:31:54.393707 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.394095 kubelet[2458]: E1213 14:31:54.393724 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.394095 kubelet[2458]: E1213 14:31:54.393914 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.394095 kubelet[2458]: W1213 14:31:54.393924 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.394095 kubelet[2458]: E1213 14:31:54.393936 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.394361 kubelet[2458]: E1213 14:31:54.394132 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.394361 kubelet[2458]: W1213 14:31:54.394143 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.394361 kubelet[2458]: E1213 14:31:54.394155 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.394361 kubelet[2458]: E1213 14:31:54.394338 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.394361 kubelet[2458]: W1213 14:31:54.394348 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.394361 kubelet[2458]: E1213 14:31:54.394359 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.394690 kubelet[2458]: E1213 14:31:54.394524 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.394690 kubelet[2458]: W1213 14:31:54.394533 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.394690 kubelet[2458]: E1213 14:31:54.394556 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.394819 kubelet[2458]: E1213 14:31:54.394730 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.394819 kubelet[2458]: W1213 14:31:54.394739 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.394819 kubelet[2458]: E1213 14:31:54.394751 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.394999 kubelet[2458]: E1213 14:31:54.394912 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.394999 kubelet[2458]: W1213 14:31:54.394920 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.394999 kubelet[2458]: E1213 14:31:54.394932 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.395141 kubelet[2458]: E1213 14:31:54.395112 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.395141 kubelet[2458]: W1213 14:31:54.395122 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.395141 kubelet[2458]: E1213 14:31:54.395133 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.395309 kubelet[2458]: E1213 14:31:54.395292 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.395309 kubelet[2458]: W1213 14:31:54.395306 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.395429 kubelet[2458]: E1213 14:31:54.395318 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.395502 kubelet[2458]: E1213 14:31:54.395484 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.395502 kubelet[2458]: W1213 14:31:54.395500 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.395664 kubelet[2458]: E1213 14:31:54.395513 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.395727 kubelet[2458]: E1213 14:31:54.395714 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.395770 kubelet[2458]: W1213 14:31:54.395728 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.395770 kubelet[2458]: E1213 14:31:54.395741 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.395978 kubelet[2458]: E1213 14:31:54.395958 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.395978 kubelet[2458]: W1213 14:31:54.395973 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.396107 kubelet[2458]: E1213 14:31:54.395988 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.396258 kubelet[2458]: E1213 14:31:54.396242 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.396258 kubelet[2458]: W1213 14:31:54.396255 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.396366 kubelet[2458]: E1213 14:31:54.396268 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.396518 kubelet[2458]: E1213 14:31:54.396501 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.396518 kubelet[2458]: W1213 14:31:54.396514 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.396704 kubelet[2458]: E1213 14:31:54.396528 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.428097 kubelet[2458]: E1213 14:31:54.428060 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.428097 kubelet[2458]: W1213 14:31:54.428085 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.428352 kubelet[2458]: E1213 14:31:54.428112 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.428448 kubelet[2458]: E1213 14:31:54.428430 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.428448 kubelet[2458]: W1213 14:31:54.428447 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.428582 kubelet[2458]: E1213 14:31:54.428465 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.428764 kubelet[2458]: E1213 14:31:54.428745 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.428872 kubelet[2458]: W1213 14:31:54.428768 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.428872 kubelet[2458]: E1213 14:31:54.428788 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.429070 kubelet[2458]: E1213 14:31:54.429049 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.429169 kubelet[2458]: W1213 14:31:54.429146 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.429240 kubelet[2458]: E1213 14:31:54.429170 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.429413 kubelet[2458]: E1213 14:31:54.429396 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.429413 kubelet[2458]: W1213 14:31:54.429411 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.429596 kubelet[2458]: E1213 14:31:54.429573 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.429697 kubelet[2458]: E1213 14:31:54.429626 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.429769 kubelet[2458]: W1213 14:31:54.429698 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.429886 kubelet[2458]: E1213 14:31:54.429853 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.429961 kubelet[2458]: E1213 14:31:54.429884 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.429961 kubelet[2458]: W1213 14:31:54.429894 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.430057 kubelet[2458]: E1213 14:31:54.429976 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.430120 kubelet[2458]: E1213 14:31:54.430110 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.430165 kubelet[2458]: W1213 14:31:54.430121 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.430165 kubelet[2458]: E1213 14:31:54.430137 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.430392 kubelet[2458]: E1213 14:31:54.430374 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.430392 kubelet[2458]: W1213 14:31:54.430387 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.430517 kubelet[2458]: E1213 14:31:54.430406 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.430838 kubelet[2458]: E1213 14:31:54.430821 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.430943 kubelet[2458]: W1213 14:31:54.430918 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.431034 kubelet[2458]: E1213 14:31:54.430944 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.431142 kubelet[2458]: E1213 14:31:54.431128 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.431142 kubelet[2458]: W1213 14:31:54.431140 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.431263 kubelet[2458]: E1213 14:31:54.431221 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.431373 kubelet[2458]: E1213 14:31:54.431357 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.431373 kubelet[2458]: W1213 14:31:54.431369 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.431527 kubelet[2458]: E1213 14:31:54.431510 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.431625 kubelet[2458]: E1213 14:31:54.431594 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.431625 kubelet[2458]: W1213 14:31:54.431619 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.431718 kubelet[2458]: E1213 14:31:54.431633 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.431882 kubelet[2458]: E1213 14:31:54.431865 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.431882 kubelet[2458]: W1213 14:31:54.431878 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.432056 kubelet[2458]: E1213 14:31:54.431898 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.432317 kubelet[2458]: E1213 14:31:54.432300 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.432317 kubelet[2458]: W1213 14:31:54.432313 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.432426 kubelet[2458]: E1213 14:31:54.432338 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.432599 kubelet[2458]: E1213 14:31:54.432581 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.432599 kubelet[2458]: W1213 14:31:54.432597 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.432749 kubelet[2458]: E1213 14:31:54.432611 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.432839 kubelet[2458]: E1213 14:31:54.432824 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.432839 kubelet[2458]: W1213 14:31:54.432837 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.432942 kubelet[2458]: E1213 14:31:54.432854 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:54.433200 kubelet[2458]: E1213 14:31:54.433185 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:54.433200 kubelet[2458]: W1213 14:31:54.433197 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:54.433305 kubelet[2458]: E1213 14:31:54.433210 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.285682 kubelet[2458]: E1213 14:31:55.285601 2458 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5fclm" podUID="97d535fd-6d62-48fb-8a31-b56e5e376a53" Dec 13 14:31:55.387704 kubelet[2458]: I1213 14:31:55.387663 2458 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Dec 13 14:31:55.404034 kubelet[2458]: E1213 14:31:55.403984 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.404034 kubelet[2458]: W1213 14:31:55.404019 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.404618 kubelet[2458]: E1213 14:31:55.404050 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.404618 kubelet[2458]: E1213 14:31:55.404283 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.404618 kubelet[2458]: W1213 14:31:55.404294 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.404618 kubelet[2458]: E1213 14:31:55.404309 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.404618 kubelet[2458]: E1213 14:31:55.404495 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.404618 kubelet[2458]: W1213 14:31:55.404505 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.404618 kubelet[2458]: E1213 14:31:55.404520 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.405097 kubelet[2458]: E1213 14:31:55.405074 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.405097 kubelet[2458]: W1213 14:31:55.405096 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.405256 kubelet[2458]: E1213 14:31:55.405116 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.405337 kubelet[2458]: E1213 14:31:55.405321 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.405408 kubelet[2458]: W1213 14:31:55.405340 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.405408 kubelet[2458]: E1213 14:31:55.405359 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.405577 kubelet[2458]: E1213 14:31:55.405554 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.405648 kubelet[2458]: W1213 14:31:55.405578 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.405648 kubelet[2458]: E1213 14:31:55.405593 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.405792 kubelet[2458]: E1213 14:31:55.405777 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.405872 kubelet[2458]: W1213 14:31:55.405793 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.405872 kubelet[2458]: E1213 14:31:55.405809 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.406009 kubelet[2458]: E1213 14:31:55.405994 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.406068 kubelet[2458]: W1213 14:31:55.406010 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.406068 kubelet[2458]: E1213 14:31:55.406025 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.406235 kubelet[2458]: E1213 14:31:55.406216 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.406235 kubelet[2458]: W1213 14:31:55.406229 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.406235 kubelet[2458]: E1213 14:31:55.406243 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.406426 kubelet[2458]: E1213 14:31:55.406408 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.406493 kubelet[2458]: W1213 14:31:55.406426 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.406493 kubelet[2458]: E1213 14:31:55.406438 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.406661 kubelet[2458]: E1213 14:31:55.406642 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.406661 kubelet[2458]: W1213 14:31:55.406657 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.406779 kubelet[2458]: E1213 14:31:55.406670 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.406858 kubelet[2458]: E1213 14:31:55.406840 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.406858 kubelet[2458]: W1213 14:31:55.406854 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.406963 kubelet[2458]: E1213 14:31:55.406868 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.407062 kubelet[2458]: E1213 14:31:55.407049 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.407062 kubelet[2458]: W1213 14:31:55.407060 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.407162 kubelet[2458]: E1213 14:31:55.407072 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.407353 kubelet[2458]: E1213 14:31:55.407331 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.407353 kubelet[2458]: W1213 14:31:55.407346 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.407469 kubelet[2458]: E1213 14:31:55.407360 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.407566 kubelet[2458]: E1213 14:31:55.407532 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.407629 kubelet[2458]: W1213 14:31:55.407558 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.407629 kubelet[2458]: E1213 14:31:55.407624 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.436303 kubelet[2458]: E1213 14:31:55.436270 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.436303 kubelet[2458]: W1213 14:31:55.436291 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.453531 kubelet[2458]: E1213 14:31:55.436315 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.453531 kubelet[2458]: E1213 14:31:55.436662 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.453531 kubelet[2458]: W1213 14:31:55.436675 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.453531 kubelet[2458]: E1213 14:31:55.436694 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.453531 kubelet[2458]: E1213 14:31:55.436922 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.453531 kubelet[2458]: W1213 14:31:55.436933 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.453531 kubelet[2458]: E1213 14:31:55.436949 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.453531 kubelet[2458]: E1213 14:31:55.437138 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.453531 kubelet[2458]: W1213 14:31:55.437147 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.453531 kubelet[2458]: E1213 14:31:55.437161 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.453829 kubelet[2458]: E1213 14:31:55.437320 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.453829 kubelet[2458]: W1213 14:31:55.437329 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.453829 kubelet[2458]: E1213 14:31:55.437344 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.453829 kubelet[2458]: E1213 14:31:55.437535 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.453829 kubelet[2458]: W1213 14:31:55.437560 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.453829 kubelet[2458]: E1213 14:31:55.437576 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.453829 kubelet[2458]: E1213 14:31:55.437826 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.453829 kubelet[2458]: W1213 14:31:55.437834 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.453829 kubelet[2458]: E1213 14:31:55.437849 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.453829 kubelet[2458]: E1213 14:31:55.438042 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.454055 kubelet[2458]: W1213 14:31:55.438050 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.454055 kubelet[2458]: E1213 14:31:55.438073 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.454055 kubelet[2458]: E1213 14:31:55.438215 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.454055 kubelet[2458]: W1213 14:31:55.438224 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.454055 kubelet[2458]: E1213 14:31:55.438245 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.454055 kubelet[2458]: E1213 14:31:55.438384 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.454055 kubelet[2458]: W1213 14:31:55.438391 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.454055 kubelet[2458]: E1213 14:31:55.438405 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.454055 kubelet[2458]: E1213 14:31:55.438619 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.454055 kubelet[2458]: W1213 14:31:55.438627 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.454325 kubelet[2458]: E1213 14:31:55.438641 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.454325 kubelet[2458]: E1213 14:31:55.438800 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.454325 kubelet[2458]: W1213 14:31:55.438808 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.454325 kubelet[2458]: E1213 14:31:55.438822 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.454325 kubelet[2458]: E1213 14:31:55.438999 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.454325 kubelet[2458]: W1213 14:31:55.439006 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.454325 kubelet[2458]: E1213 14:31:55.439019 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.454325 kubelet[2458]: E1213 14:31:55.439270 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.454325 kubelet[2458]: W1213 14:31:55.439278 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.454325 kubelet[2458]: E1213 14:31:55.439293 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.454565 kubelet[2458]: E1213 14:31:55.439452 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.454565 kubelet[2458]: W1213 14:31:55.439459 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.454565 kubelet[2458]: E1213 14:31:55.439471 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.454565 kubelet[2458]: E1213 14:31:55.439671 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.454565 kubelet[2458]: W1213 14:31:55.439679 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.454565 kubelet[2458]: E1213 14:31:55.439692 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.454565 kubelet[2458]: E1213 14:31:55.439946 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.454565 kubelet[2458]: W1213 14:31:55.439960 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.454565 kubelet[2458]: E1213 14:31:55.439977 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.454565 kubelet[2458]: E1213 14:31:55.440632 2458 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 14:31:55.454910 kubelet[2458]: W1213 14:31:55.440640 2458 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 14:31:55.454910 kubelet[2458]: E1213 14:31:55.440650 2458 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 14:31:55.866423 env[1414]: time="2024-12-13T14:31:55.866360113Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:55.916480 env[1414]: time="2024-12-13T14:31:55.916421444Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2b7452b763ec8833ca0386ada5fd066e552a9b3b02b8538a5e34cc3d6d3840a6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:55.962265 env[1414]: time="2024-12-13T14:31:55.962201864Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:56.008404 env[1414]: time="2024-12-13T14:31:56.008339884Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:a63f8b4ff531912d12d143664eb263fdbc6cd7b3ff4aa777dfb6e318a090462c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:31:56.009260 env[1414]: time="2024-12-13T14:31:56.009225287Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.29.1\" returns image reference \"sha256:2b7452b763ec8833ca0386ada5fd066e552a9b3b02b8538a5e34cc3d6d3840a6\"" Dec 13 14:31:56.011591 env[1414]: time="2024-12-13T14:31:56.011536093Z" level=info msg="CreateContainer within sandbox \"20a2c38c124635dc9b01a2156cc8850ddca570a0a82a40705df1a0aa9cff962e\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Dec 13 14:31:56.311596 env[1414]: time="2024-12-13T14:31:56.311518568Z" level=info msg="CreateContainer within sandbox \"20a2c38c124635dc9b01a2156cc8850ddca570a0a82a40705df1a0aa9cff962e\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"2547bf75cb71cb096b47082a266d08033d1031fa426fe741653b2d3c25dd7250\"" Dec 13 14:31:56.312478 env[1414]: time="2024-12-13T14:31:56.312440570Z" level=info msg="StartContainer for \"2547bf75cb71cb096b47082a266d08033d1031fa426fe741653b2d3c25dd7250\"" Dec 13 14:31:56.352224 systemd[1]: run-containerd-runc-k8s.io-2547bf75cb71cb096b47082a266d08033d1031fa426fe741653b2d3c25dd7250-runc.i5Id4h.mount: Deactivated successfully. Dec 13 14:31:56.357048 systemd[1]: Started cri-containerd-2547bf75cb71cb096b47082a266d08033d1031fa426fe741653b2d3c25dd7250.scope. Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { perfmon } for pid=3051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.395569 kernel: kauditd_printk_skb: 104 callbacks suppressed Dec 13 14:31:56.395728 kernel: audit: type=1400 audit(1734100316.377:992): avc: denied { perfmon } for pid=3051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.377000 audit[3051]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7f7696df4ef8 items=0 ppid=2903 pid=3051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:56.421662 kernel: audit: type=1300 audit(1734100316.377:992): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7f7696df4ef8 items=0 ppid=2903 pid=3051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:56.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235343762663735636237316362303936623437303832613236366430 Dec 13 14:31:56.440662 kernel: audit: type=1327 audit(1734100316.377:992): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235343762663735636237316362303936623437303832613236366430 Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { bpf } for pid=3051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.462580 kernel: audit: type=1400 audit(1734100316.377:993): avc: denied { bpf } for pid=3051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.468381 env[1414]: time="2024-12-13T14:31:56.468310873Z" level=info msg="StartContainer for \"2547bf75cb71cb096b47082a266d08033d1031fa426fe741653b2d3c25dd7250\" returns successfully" Dec 13 14:31:56.476762 systemd[1]: cri-containerd-2547bf75cb71cb096b47082a266d08033d1031fa426fe741653b2d3c25dd7250.scope: Deactivated successfully. Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { bpf } for pid=3051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.492583 kernel: audit: type=1400 audit(1734100316.377:993): avc: denied { bpf } for pid=3051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { bpf } for pid=3051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.507592 kernel: audit: type=1400 audit(1734100316.377:993): avc: denied { bpf } for pid=3051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { perfmon } for pid=3051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.537029 kernel: audit: type=1400 audit(1734100316.377:993): avc: denied { perfmon } for pid=3051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.537139 kernel: audit: type=1400 audit(1734100316.377:993): avc: denied { perfmon } for pid=3051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { perfmon } for pid=3051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.535679 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2547bf75cb71cb096b47082a266d08033d1031fa426fe741653b2d3c25dd7250-rootfs.mount: Deactivated successfully. Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { perfmon } for pid=3051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.562589 kernel: audit: type=1400 audit(1734100316.377:993): avc: denied { perfmon } for pid=3051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { perfmon } for pid=3051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.576579 kernel: audit: type=1400 audit(1734100316.377:993): avc: denied { perfmon } for pid=3051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { perfmon } for pid=3051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { bpf } for pid=3051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { bpf } for pid=3051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.377000 audit: BPF prog-id=128 op=LOAD Dec 13 14:31:56.377000 audit[3051]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c00038c9c8 items=0 ppid=2903 pid=3051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:56.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235343762663735636237316362303936623437303832613236366430 Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { bpf } for pid=3051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { bpf } for pid=3051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { perfmon } for pid=3051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { perfmon } for pid=3051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { perfmon } for pid=3051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { perfmon } for pid=3051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { perfmon } for pid=3051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { bpf } for pid=3051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { bpf } for pid=3051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.377000 audit: BPF prog-id=129 op=LOAD Dec 13 14:31:56.377000 audit[3051]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c00038ca18 items=0 ppid=2903 pid=3051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:56.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235343762663735636237316362303936623437303832613236366430 Dec 13 14:31:56.377000 audit: BPF prog-id=129 op=UNLOAD Dec 13 14:31:56.377000 audit: BPF prog-id=128 op=UNLOAD Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { bpf } for pid=3051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { bpf } for pid=3051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { bpf } for pid=3051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { perfmon } for pid=3051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { perfmon } for pid=3051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { perfmon } for pid=3051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { perfmon } for pid=3051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { perfmon } for pid=3051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { bpf } for pid=3051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.377000 audit[3051]: AVC avc: denied { bpf } for pid=3051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:31:56.377000 audit: BPF prog-id=130 op=LOAD Dec 13 14:31:56.377000 audit[3051]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c00038caa8 items=0 ppid=2903 pid=3051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:31:56.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235343762663735636237316362303936623437303832613236366430 Dec 13 14:31:56.493000 audit: BPF prog-id=130 op=UNLOAD Dec 13 14:31:57.283377 kubelet[2458]: E1213 14:31:57.283316 2458 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5fclm" podUID="97d535fd-6d62-48fb-8a31-b56e5e376a53" Dec 13 14:31:57.420764 kubelet[2458]: I1213 14:31:57.420668 2458 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-55c5f89d89-tdcb7" podStartSLOduration=5.558193832 podStartE2EDuration="10.42064742s" podCreationTimestamp="2024-12-13 14:31:47 +0000 UTC" firstStartedPulling="2024-12-13 14:31:48.402853926 +0000 UTC m=+15.317841575" lastFinishedPulling="2024-12-13 14:31:53.265307514 +0000 UTC m=+20.180295163" observedRunningTime="2024-12-13 14:31:54.398858549 +0000 UTC m=+21.313846198" watchObservedRunningTime="2024-12-13 14:31:57.42064742 +0000 UTC m=+24.335635169" Dec 13 14:31:59.285486 kubelet[2458]: E1213 14:31:59.283661 2458 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5fclm" podUID="97d535fd-6d62-48fb-8a31-b56e5e376a53" Dec 13 14:32:01.284141 kubelet[2458]: E1213 14:32:01.284072 2458 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5fclm" podUID="97d535fd-6d62-48fb-8a31-b56e5e376a53" Dec 13 14:32:02.037675 kubelet[2458]: I1213 14:32:02.037622 2458 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Dec 13 14:32:02.069000 audit[3097]: NETFILTER_CFG table=filter:99 family=2 entries=17 op=nft_register_rule pid=3097 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:32:02.074077 kernel: kauditd_printk_skb: 34 callbacks suppressed Dec 13 14:32:02.074190 kernel: audit: type=1325 audit(1734100322.069:999): table=filter:99 family=2 entries=17 op=nft_register_rule pid=3097 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:32:02.069000 audit[3097]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fff3133df50 a2=0 a3=7fff3133df3c items=0 ppid=2614 pid=3097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:02.069000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:32:02.114840 kernel: audit: type=1300 audit(1734100322.069:999): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fff3133df50 a2=0 a3=7fff3133df3c items=0 ppid=2614 pid=3097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:02.114996 kernel: audit: type=1327 audit(1734100322.069:999): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:32:02.115026 kernel: audit: type=1325 audit(1734100322.084:1000): table=nat:100 family=2 entries=19 op=nft_register_chain pid=3097 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:32:02.084000 audit[3097]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=3097 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:32:02.084000 audit[3097]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7fff3133df50 a2=0 a3=7fff3133df3c items=0 ppid=2614 pid=3097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:02.148029 kernel: audit: type=1300 audit(1734100322.084:1000): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7fff3133df50 a2=0 a3=7fff3133df3c items=0 ppid=2614 pid=3097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:02.148182 kernel: audit: type=1327 audit(1734100322.084:1000): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:32:02.084000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:32:02.534869 env[1414]: time="2024-12-13T14:32:02.534808176Z" level=info msg="shim disconnected" id=2547bf75cb71cb096b47082a266d08033d1031fa426fe741653b2d3c25dd7250 Dec 13 14:32:02.535402 env[1414]: time="2024-12-13T14:32:02.534877277Z" level=warning msg="cleaning up after shim disconnected" id=2547bf75cb71cb096b47082a266d08033d1031fa426fe741653b2d3c25dd7250 namespace=k8s.io Dec 13 14:32:02.535402 env[1414]: time="2024-12-13T14:32:02.534894777Z" level=info msg="cleaning up dead shim" Dec 13 14:32:02.543033 env[1414]: time="2024-12-13T14:32:02.542975496Z" level=warning msg="cleanup warnings time=\"2024-12-13T14:32:02Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3098 runtime=io.containerd.runc.v2\n" Dec 13 14:32:03.284054 kubelet[2458]: E1213 14:32:03.284005 2458 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5fclm" podUID="97d535fd-6d62-48fb-8a31-b56e5e376a53" Dec 13 14:32:03.428713 env[1414]: time="2024-12-13T14:32:03.428656011Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.29.1\"" Dec 13 14:32:05.283320 kubelet[2458]: E1213 14:32:05.283271 2458 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5fclm" podUID="97d535fd-6d62-48fb-8a31-b56e5e376a53" Dec 13 14:32:07.284844 kubelet[2458]: E1213 14:32:07.284792 2458 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5fclm" podUID="97d535fd-6d62-48fb-8a31-b56e5e376a53" Dec 13 14:32:07.734045 env[1414]: time="2024-12-13T14:32:07.733981998Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:32:07.738838 env[1414]: time="2024-12-13T14:32:07.738780809Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7dd6ea186aba0d7a1791a79d426fe854527ca95192b26bbd19e8baf8373f7d0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:32:07.741825 env[1414]: time="2024-12-13T14:32:07.741776216Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:32:07.745413 env[1414]: time="2024-12-13T14:32:07.745368424Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:21e759d51c90dfb34fc1397dc180dd3a3fb564c2b0580d2f61ffe108f2a3c94b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:32:07.745949 env[1414]: time="2024-12-13T14:32:07.745915726Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.29.1\" returns image reference \"sha256:7dd6ea186aba0d7a1791a79d426fe854527ca95192b26bbd19e8baf8373f7d0e\"" Dec 13 14:32:07.749764 env[1414]: time="2024-12-13T14:32:07.749724034Z" level=info msg="CreateContainer within sandbox \"20a2c38c124635dc9b01a2156cc8850ddca570a0a82a40705df1a0aa9cff962e\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Dec 13 14:32:07.792395 env[1414]: time="2024-12-13T14:32:07.792338831Z" level=info msg="CreateContainer within sandbox \"20a2c38c124635dc9b01a2156cc8850ddca570a0a82a40705df1a0aa9cff962e\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"70957cddb0a55520dcaacdf43672588a7b1a302783a6401cbf5da080031c4e8d\"" Dec 13 14:32:07.798942 env[1414]: time="2024-12-13T14:32:07.798874346Z" level=info msg="StartContainer for \"70957cddb0a55520dcaacdf43672588a7b1a302783a6401cbf5da080031c4e8d\"" Dec 13 14:32:07.831382 systemd[1]: run-containerd-runc-k8s.io-70957cddb0a55520dcaacdf43672588a7b1a302783a6401cbf5da080031c4e8d-runc.NMKVAK.mount: Deactivated successfully. Dec 13 14:32:07.841405 systemd[1]: Started cri-containerd-70957cddb0a55520dcaacdf43672588a7b1a302783a6401cbf5da080031c4e8d.scope. Dec 13 14:32:07.857000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.857000 audit[3120]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f81f04c0b18 items=0 ppid=2903 pid=3120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:07.893919 kernel: audit: type=1400 audit(1734100327.857:1001): avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.894058 kernel: audit: type=1300 audit(1734100327.857:1001): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f81f04c0b18 items=0 ppid=2903 pid=3120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:07.894096 kernel: audit: type=1327 audit(1734100327.857:1001): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730393537636464623061353535323064636161636466343336373235 Dec 13 14:32:07.857000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730393537636464623061353535323064636161636466343336373235 Dec 13 14:32:07.857000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.857000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.945570 kernel: audit: type=1400 audit(1734100327.857:1002): avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.945698 kernel: audit: type=1400 audit(1734100327.857:1002): avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.945727 kernel: audit: type=1400 audit(1734100327.857:1002): avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.857000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.857000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.968225 env[1414]: time="2024-12-13T14:32:07.968165831Z" level=info msg="StartContainer for \"70957cddb0a55520dcaacdf43672588a7b1a302783a6401cbf5da080031c4e8d\" returns successfully" Dec 13 14:32:07.971671 kernel: audit: type=1400 audit(1734100327.857:1002): avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.857000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.986305 kernel: audit: type=1400 audit(1734100327.857:1002): avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.857000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:08.003579 kernel: audit: type=1400 audit(1734100327.857:1002): avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.857000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:08.020586 kernel: audit: type=1400 audit(1734100327.857:1002): avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.857000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.857000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.857000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.857000 audit: BPF prog-id=131 op=LOAD Dec 13 14:32:07.857000 audit[3120]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000290888 items=0 ppid=2903 pid=3120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:07.857000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730393537636464623061353535323064636161636466343336373235 Dec 13 14:32:07.914000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.914000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.914000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.914000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.914000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.914000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.914000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.914000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.914000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.914000 audit: BPF prog-id=132 op=LOAD Dec 13 14:32:07.914000 audit[3120]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000334d78 items=0 ppid=2903 pid=3120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:07.914000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730393537636464623061353535323064636161636466343336373235 Dec 13 14:32:07.914000 audit: BPF prog-id=132 op=UNLOAD Dec 13 14:32:07.914000 audit: BPF prog-id=131 op=UNLOAD Dec 13 14:32:07.914000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.914000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.914000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.914000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.914000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.914000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.914000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.914000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.914000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.914000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:07.914000 audit: BPF prog-id=133 op=LOAD Dec 13 14:32:07.914000 audit[3120]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000334e08 items=0 ppid=2903 pid=3120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:07.914000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730393537636464623061353535323064636161636466343336373235 Dec 13 14:32:09.283640 kubelet[2458]: E1213 14:32:09.283584 2458 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5fclm" podUID="97d535fd-6d62-48fb-8a31-b56e5e376a53" Dec 13 14:32:09.430710 env[1414]: time="2024-12-13T14:32:09.430655911Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Dec 13 14:32:09.434180 systemd[1]: cri-containerd-70957cddb0a55520dcaacdf43672588a7b1a302783a6401cbf5da080031c4e8d.scope: Deactivated successfully. Dec 13 14:32:09.438000 audit: BPF prog-id=133 op=UNLOAD Dec 13 14:32:09.439066 kubelet[2458]: I1213 14:32:09.439034 2458 kubelet_node_status.go:488] "Fast updating node status as it just became ready" Dec 13 14:32:09.466189 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-70957cddb0a55520dcaacdf43672588a7b1a302783a6401cbf5da080031c4e8d-rootfs.mount: Deactivated successfully. Dec 13 14:32:09.486920 systemd[1]: Created slice kubepods-burstable-poda502a44e_8475_402c_b0b4_09e660487f43.slice. Dec 13 14:32:09.504602 systemd[1]: Created slice kubepods-besteffort-poda16f2d4c_353e_4324_a00d_1da60b685d6a.slice. Dec 13 14:32:09.511469 systemd[1]: Created slice kubepods-burstable-podab01c38b_ace9_49a5_9e1f_886c614236ba.slice. Dec 13 14:32:10.065068 kubelet[2458]: I1213 14:32:09.557822 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/a502a44e-8475-402c-b0b4-09e660487f43-config-volume\") pod \"coredns-6f6b679f8f-6dpql\" (UID: \"a502a44e-8475-402c-b0b4-09e660487f43\") " pod="kube-system/coredns-6f6b679f8f-6dpql" Dec 13 14:32:10.065068 kubelet[2458]: I1213 14:32:09.557879 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bmvjm\" (UniqueName: \"kubernetes.io/projected/a502a44e-8475-402c-b0b4-09e660487f43-kube-api-access-bmvjm\") pod \"coredns-6f6b679f8f-6dpql\" (UID: \"a502a44e-8475-402c-b0b4-09e660487f43\") " pod="kube-system/coredns-6f6b679f8f-6dpql" Dec 13 14:32:10.065068 kubelet[2458]: I1213 14:32:09.557912 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9gpcd\" (UniqueName: \"kubernetes.io/projected/ab01c38b-ace9-49a5-9e1f-886c614236ba-kube-api-access-9gpcd\") pod \"coredns-6f6b679f8f-9pcc2\" (UID: \"ab01c38b-ace9-49a5-9e1f-886c614236ba\") " pod="kube-system/coredns-6f6b679f8f-9pcc2" Dec 13 14:32:10.065068 kubelet[2458]: I1213 14:32:09.557954 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9fpll\" (UniqueName: \"kubernetes.io/projected/50dce1b7-10b8-45fe-a58b-95a13522c319-kube-api-access-9fpll\") pod \"calico-apiserver-686fc44668-frvqf\" (UID: \"50dce1b7-10b8-45fe-a58b-95a13522c319\") " pod="calico-apiserver/calico-apiserver-686fc44668-frvqf" Dec 13 14:32:10.065068 kubelet[2458]: I1213 14:32:09.557978 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/ab01c38b-ace9-49a5-9e1f-886c614236ba-config-volume\") pod \"coredns-6f6b679f8f-9pcc2\" (UID: \"ab01c38b-ace9-49a5-9e1f-886c614236ba\") " pod="kube-system/coredns-6f6b679f8f-9pcc2" Dec 13 14:32:09.521380 systemd[1]: Created slice kubepods-besteffort-pod6fc9dd3b_fe61_4b81_8279_1d36298429b2.slice. Dec 13 14:32:10.065417 kubelet[2458]: I1213 14:32:09.558008 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/a16f2d4c-353e-4324-a00d-1da60b685d6a-calico-apiserver-certs\") pod \"calico-apiserver-686fc44668-wmp2w\" (UID: \"a16f2d4c-353e-4324-a00d-1da60b685d6a\") " pod="calico-apiserver/calico-apiserver-686fc44668-wmp2w" Dec 13 14:32:10.065417 kubelet[2458]: I1213 14:32:09.558049 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/50dce1b7-10b8-45fe-a58b-95a13522c319-calico-apiserver-certs\") pod \"calico-apiserver-686fc44668-frvqf\" (UID: \"50dce1b7-10b8-45fe-a58b-95a13522c319\") " pod="calico-apiserver/calico-apiserver-686fc44668-frvqf" Dec 13 14:32:10.065417 kubelet[2458]: I1213 14:32:09.558076 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/6fc9dd3b-fe61-4b81-8279-1d36298429b2-tigera-ca-bundle\") pod \"calico-kube-controllers-f9f5cc4c-fjz2l\" (UID: \"6fc9dd3b-fe61-4b81-8279-1d36298429b2\") " pod="calico-system/calico-kube-controllers-f9f5cc4c-fjz2l" Dec 13 14:32:10.065417 kubelet[2458]: I1213 14:32:09.558114 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7xg48\" (UniqueName: \"kubernetes.io/projected/a16f2d4c-353e-4324-a00d-1da60b685d6a-kube-api-access-7xg48\") pod \"calico-apiserver-686fc44668-wmp2w\" (UID: \"a16f2d4c-353e-4324-a00d-1da60b685d6a\") " pod="calico-apiserver/calico-apiserver-686fc44668-wmp2w" Dec 13 14:32:10.065417 kubelet[2458]: I1213 14:32:09.558145 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2n4hb\" (UniqueName: \"kubernetes.io/projected/6fc9dd3b-fe61-4b81-8279-1d36298429b2-kube-api-access-2n4hb\") pod \"calico-kube-controllers-f9f5cc4c-fjz2l\" (UID: \"6fc9dd3b-fe61-4b81-8279-1d36298429b2\") " pod="calico-system/calico-kube-controllers-f9f5cc4c-fjz2l" Dec 13 14:32:09.528765 systemd[1]: Created slice kubepods-besteffort-pod50dce1b7_10b8_45fe_a58b_95a13522c319.slice. Dec 13 14:32:10.365302 env[1414]: time="2024-12-13T14:32:10.365147383Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-686fc44668-wmp2w,Uid:a16f2d4c-353e-4324-a00d-1da60b685d6a,Namespace:calico-apiserver,Attempt:0,}" Dec 13 14:32:10.371466 env[1414]: time="2024-12-13T14:32:10.371418197Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-6f6b679f8f-9pcc2,Uid:ab01c38b-ace9-49a5-9e1f-886c614236ba,Namespace:kube-system,Attempt:0,}" Dec 13 14:32:10.391436 env[1414]: time="2024-12-13T14:32:10.390902540Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-686fc44668-frvqf,Uid:50dce1b7-10b8-45fe-a58b-95a13522c319,Namespace:calico-apiserver,Attempt:0,}" Dec 13 14:32:10.391436 env[1414]: time="2024-12-13T14:32:10.391116740Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-6f6b679f8f-6dpql,Uid:a502a44e-8475-402c-b0b4-09e660487f43,Namespace:kube-system,Attempt:0,}" Dec 13 14:32:10.391436 env[1414]: time="2024-12-13T14:32:10.391276241Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-f9f5cc4c-fjz2l,Uid:6fc9dd3b-fe61-4b81-8279-1d36298429b2,Namespace:calico-system,Attempt:0,}" Dec 13 14:32:11.174854 env[1414]: time="2024-12-13T14:32:11.174767964Z" level=info msg="shim disconnected" id=70957cddb0a55520dcaacdf43672588a7b1a302783a6401cbf5da080031c4e8d Dec 13 14:32:11.174854 env[1414]: time="2024-12-13T14:32:11.174820764Z" level=warning msg="cleaning up after shim disconnected" id=70957cddb0a55520dcaacdf43672588a7b1a302783a6401cbf5da080031c4e8d namespace=k8s.io Dec 13 14:32:11.174854 env[1414]: time="2024-12-13T14:32:11.174832964Z" level=info msg="cleaning up dead shim" Dec 13 14:32:11.184363 env[1414]: time="2024-12-13T14:32:11.184311085Z" level=warning msg="cleanup warnings time=\"2024-12-13T14:32:11Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3183 runtime=io.containerd.runc.v2\n" Dec 13 14:32:11.288718 systemd[1]: Created slice kubepods-besteffort-pod97d535fd_6d62_48fb_8a31_b56e5e376a53.slice. Dec 13 14:32:11.292124 env[1414]: time="2024-12-13T14:32:11.292080320Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-5fclm,Uid:97d535fd-6d62-48fb-8a31-b56e5e376a53,Namespace:calico-system,Attempt:0,}" Dec 13 14:32:11.365852 env[1414]: time="2024-12-13T14:32:11.365773181Z" level=error msg="Failed to destroy network for sandbox \"0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:11.366202 env[1414]: time="2024-12-13T14:32:11.366160582Z" level=error msg="encountered an error cleaning up failed sandbox \"0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:11.366312 env[1414]: time="2024-12-13T14:32:11.366228882Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-686fc44668-wmp2w,Uid:a16f2d4c-353e-4324-a00d-1da60b685d6a,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:11.369204 kubelet[2458]: E1213 14:32:11.366844 2458 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:11.369204 kubelet[2458]: E1213 14:32:11.366958 2458 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-686fc44668-wmp2w" Dec 13 14:32:11.369204 kubelet[2458]: E1213 14:32:11.366986 2458 kuberuntime_manager.go:1168] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-686fc44668-wmp2w" Dec 13 14:32:11.369886 kubelet[2458]: E1213 14:32:11.367058 2458 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-686fc44668-wmp2w_calico-apiserver(a16f2d4c-353e-4324-a00d-1da60b685d6a)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-686fc44668-wmp2w_calico-apiserver(a16f2d4c-353e-4324-a00d-1da60b685d6a)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-686fc44668-wmp2w" podUID="a16f2d4c-353e-4324-a00d-1da60b685d6a" Dec 13 14:32:11.439785 env[1414]: time="2024-12-13T14:32:11.438253039Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.29.1\"" Dec 13 14:32:11.452409 kubelet[2458]: I1213 14:32:11.452371 2458 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" Dec 13 14:32:11.453277 env[1414]: time="2024-12-13T14:32:11.453224972Z" level=info msg="StopPodSandbox for \"0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa\"" Dec 13 14:32:11.472586 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa-shm.mount: Deactivated successfully. Dec 13 14:32:11.576021 env[1414]: time="2024-12-13T14:32:11.575941440Z" level=error msg="Failed to destroy network for sandbox \"d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:11.579800 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf-shm.mount: Deactivated successfully. Dec 13 14:32:11.581536 env[1414]: time="2024-12-13T14:32:11.581468652Z" level=error msg="encountered an error cleaning up failed sandbox \"d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:11.581783 env[1414]: time="2024-12-13T14:32:11.581742652Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-f9f5cc4c-fjz2l,Uid:6fc9dd3b-fe61-4b81-8279-1d36298429b2,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:11.582205 kubelet[2458]: E1213 14:32:11.582159 2458 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:11.582330 kubelet[2458]: E1213 14:32:11.582237 2458 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-f9f5cc4c-fjz2l" Dec 13 14:32:11.582330 kubelet[2458]: E1213 14:32:11.582265 2458 kuberuntime_manager.go:1168] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-f9f5cc4c-fjz2l" Dec 13 14:32:11.582429 kubelet[2458]: E1213 14:32:11.582322 2458 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-f9f5cc4c-fjz2l_calico-system(6fc9dd3b-fe61-4b81-8279-1d36298429b2)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-f9f5cc4c-fjz2l_calico-system(6fc9dd3b-fe61-4b81-8279-1d36298429b2)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-f9f5cc4c-fjz2l" podUID="6fc9dd3b-fe61-4b81-8279-1d36298429b2" Dec 13 14:32:11.584628 env[1414]: time="2024-12-13T14:32:11.584567459Z" level=error msg="StopPodSandbox for \"0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa\" failed" error="failed to destroy network for sandbox \"0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:11.585700 kubelet[2458]: E1213 14:32:11.585454 2458 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" Dec 13 14:32:11.585700 kubelet[2458]: E1213 14:32:11.585532 2458 kuberuntime_manager.go:1477] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa"} Dec 13 14:32:11.585700 kubelet[2458]: E1213 14:32:11.585627 2458 kuberuntime_manager.go:1077] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a16f2d4c-353e-4324-a00d-1da60b685d6a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Dec 13 14:32:11.585700 kubelet[2458]: E1213 14:32:11.585657 2458 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a16f2d4c-353e-4324-a00d-1da60b685d6a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-686fc44668-wmp2w" podUID="a16f2d4c-353e-4324-a00d-1da60b685d6a" Dec 13 14:32:11.605695 env[1414]: time="2024-12-13T14:32:11.605621905Z" level=error msg="Failed to destroy network for sandbox \"db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:11.606329 env[1414]: time="2024-12-13T14:32:11.606275406Z" level=error msg="encountered an error cleaning up failed sandbox \"db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:11.606513 env[1414]: time="2024-12-13T14:32:11.606479006Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-686fc44668-frvqf,Uid:50dce1b7-10b8-45fe-a58b-95a13522c319,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:11.608088 kubelet[2458]: E1213 14:32:11.606876 2458 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:11.608088 kubelet[2458]: E1213 14:32:11.606961 2458 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-686fc44668-frvqf" Dec 13 14:32:11.608088 kubelet[2458]: E1213 14:32:11.606998 2458 kuberuntime_manager.go:1168] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-686fc44668-frvqf" Dec 13 14:32:11.608328 kubelet[2458]: E1213 14:32:11.607055 2458 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-686fc44668-frvqf_calico-apiserver(50dce1b7-10b8-45fe-a58b-95a13522c319)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-686fc44668-frvqf_calico-apiserver(50dce1b7-10b8-45fe-a58b-95a13522c319)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-686fc44668-frvqf" podUID="50dce1b7-10b8-45fe-a58b-95a13522c319" Dec 13 14:32:11.609056 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210-shm.mount: Deactivated successfully. Dec 13 14:32:11.612329 env[1414]: time="2024-12-13T14:32:11.612268219Z" level=error msg="Failed to destroy network for sandbox \"1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:11.612972 env[1414]: time="2024-12-13T14:32:11.612922521Z" level=error msg="encountered an error cleaning up failed sandbox \"1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:11.613142 env[1414]: time="2024-12-13T14:32:11.613110321Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-6f6b679f8f-9pcc2,Uid:ab01c38b-ace9-49a5-9e1f-886c614236ba,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:11.614418 kubelet[2458]: E1213 14:32:11.613396 2458 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:11.614418 kubelet[2458]: E1213 14:32:11.613468 2458 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-6f6b679f8f-9pcc2" Dec 13 14:32:11.614418 kubelet[2458]: E1213 14:32:11.613497 2458 kuberuntime_manager.go:1168] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-6f6b679f8f-9pcc2" Dec 13 14:32:11.614649 kubelet[2458]: E1213 14:32:11.613569 2458 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-6f6b679f8f-9pcc2_kube-system(ab01c38b-ace9-49a5-9e1f-886c614236ba)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-6f6b679f8f-9pcc2_kube-system(ab01c38b-ace9-49a5-9e1f-886c614236ba)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-6f6b679f8f-9pcc2" podUID="ab01c38b-ace9-49a5-9e1f-886c614236ba" Dec 13 14:32:11.615451 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7-shm.mount: Deactivated successfully. Dec 13 14:32:11.639988 env[1414]: time="2024-12-13T14:32:11.639919179Z" level=error msg="Failed to destroy network for sandbox \"2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:11.640661 env[1414]: time="2024-12-13T14:32:11.640609481Z" level=error msg="encountered an error cleaning up failed sandbox \"2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:11.640883 env[1414]: time="2024-12-13T14:32:11.640841382Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-6f6b679f8f-6dpql,Uid:a502a44e-8475-402c-b0b4-09e660487f43,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:11.642299 kubelet[2458]: E1213 14:32:11.641176 2458 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:11.642299 kubelet[2458]: E1213 14:32:11.641254 2458 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-6f6b679f8f-6dpql" Dec 13 14:32:11.642299 kubelet[2458]: E1213 14:32:11.641280 2458 kuberuntime_manager.go:1168] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-6f6b679f8f-6dpql" Dec 13 14:32:11.642557 kubelet[2458]: E1213 14:32:11.641336 2458 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-6f6b679f8f-6dpql_kube-system(a502a44e-8475-402c-b0b4-09e660487f43)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-6f6b679f8f-6dpql_kube-system(a502a44e-8475-402c-b0b4-09e660487f43)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-6f6b679f8f-6dpql" podUID="a502a44e-8475-402c-b0b4-09e660487f43" Dec 13 14:32:11.643303 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38-shm.mount: Deactivated successfully. Dec 13 14:32:11.651498 env[1414]: time="2024-12-13T14:32:11.651440205Z" level=error msg="Failed to destroy network for sandbox \"791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:11.651939 env[1414]: time="2024-12-13T14:32:11.651891406Z" level=error msg="encountered an error cleaning up failed sandbox \"791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:11.652043 env[1414]: time="2024-12-13T14:32:11.651967706Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-5fclm,Uid:97d535fd-6d62-48fb-8a31-b56e5e376a53,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:11.653025 kubelet[2458]: E1213 14:32:11.652236 2458 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:11.653025 kubelet[2458]: E1213 14:32:11.652314 2458 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-5fclm" Dec 13 14:32:11.653025 kubelet[2458]: E1213 14:32:11.652345 2458 kuberuntime_manager.go:1168] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-5fclm" Dec 13 14:32:11.653232 kubelet[2458]: E1213 14:32:11.652401 2458 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-5fclm_calico-system(97d535fd-6d62-48fb-8a31-b56e5e376a53)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-5fclm_calico-system(97d535fd-6d62-48fb-8a31-b56e5e376a53)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-5fclm" podUID="97d535fd-6d62-48fb-8a31-b56e5e376a53" Dec 13 14:32:12.456218 kubelet[2458]: I1213 14:32:12.456184 2458 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" Dec 13 14:32:12.457051 env[1414]: time="2024-12-13T14:32:12.457009554Z" level=info msg="StopPodSandbox for \"2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38\"" Dec 13 14:32:12.460244 kubelet[2458]: I1213 14:32:12.460216 2458 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" Dec 13 14:32:12.461781 env[1414]: time="2024-12-13T14:32:12.461726164Z" level=info msg="StopPodSandbox for \"d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf\"" Dec 13 14:32:12.462302 kubelet[2458]: I1213 14:32:12.462278 2458 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" Dec 13 14:32:12.463120 env[1414]: time="2024-12-13T14:32:12.463086367Z" level=info msg="StopPodSandbox for \"db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210\"" Dec 13 14:32:12.466633 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686-shm.mount: Deactivated successfully. Dec 13 14:32:12.468890 kubelet[2458]: I1213 14:32:12.468849 2458 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" Dec 13 14:32:12.469800 env[1414]: time="2024-12-13T14:32:12.469762482Z" level=info msg="StopPodSandbox for \"1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7\"" Dec 13 14:32:12.471090 kubelet[2458]: I1213 14:32:12.470630 2458 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" Dec 13 14:32:12.471291 env[1414]: time="2024-12-13T14:32:12.471208585Z" level=info msg="StopPodSandbox for \"791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686\"" Dec 13 14:32:12.533778 env[1414]: time="2024-12-13T14:32:12.533697620Z" level=error msg="StopPodSandbox for \"2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38\" failed" error="failed to destroy network for sandbox \"2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:12.534320 kubelet[2458]: E1213 14:32:12.534268 2458 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" Dec 13 14:32:12.534461 kubelet[2458]: E1213 14:32:12.534378 2458 kuberuntime_manager.go:1477] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38"} Dec 13 14:32:12.534461 kubelet[2458]: E1213 14:32:12.534428 2458 kuberuntime_manager.go:1077] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a502a44e-8475-402c-b0b4-09e660487f43\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Dec 13 14:32:12.534696 kubelet[2458]: E1213 14:32:12.534458 2458 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a502a44e-8475-402c-b0b4-09e660487f43\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-6f6b679f8f-6dpql" podUID="a502a44e-8475-402c-b0b4-09e660487f43" Dec 13 14:32:12.588532 env[1414]: time="2024-12-13T14:32:12.588455638Z" level=error msg="StopPodSandbox for \"d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf\" failed" error="failed to destroy network for sandbox \"d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:12.588783 kubelet[2458]: E1213 14:32:12.588742 2458 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" Dec 13 14:32:12.588886 kubelet[2458]: E1213 14:32:12.588805 2458 kuberuntime_manager.go:1477] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf"} Dec 13 14:32:12.588886 kubelet[2458]: E1213 14:32:12.588850 2458 kuberuntime_manager.go:1077] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"6fc9dd3b-fe61-4b81-8279-1d36298429b2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Dec 13 14:32:12.589029 kubelet[2458]: E1213 14:32:12.588884 2458 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"6fc9dd3b-fe61-4b81-8279-1d36298429b2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-f9f5cc4c-fjz2l" podUID="6fc9dd3b-fe61-4b81-8279-1d36298429b2" Dec 13 14:32:12.589876 env[1414]: time="2024-12-13T14:32:12.589821741Z" level=error msg="StopPodSandbox for \"1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7\" failed" error="failed to destroy network for sandbox \"1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:12.590366 kubelet[2458]: E1213 14:32:12.590197 2458 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" Dec 13 14:32:12.590366 kubelet[2458]: E1213 14:32:12.590261 2458 kuberuntime_manager.go:1477] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7"} Dec 13 14:32:12.590366 kubelet[2458]: E1213 14:32:12.590297 2458 kuberuntime_manager.go:1077] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"ab01c38b-ace9-49a5-9e1f-886c614236ba\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Dec 13 14:32:12.590366 kubelet[2458]: E1213 14:32:12.590324 2458 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"ab01c38b-ace9-49a5-9e1f-886c614236ba\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-6f6b679f8f-9pcc2" podUID="ab01c38b-ace9-49a5-9e1f-886c614236ba" Dec 13 14:32:12.592413 env[1414]: time="2024-12-13T14:32:12.592366447Z" level=error msg="StopPodSandbox for \"db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210\" failed" error="failed to destroy network for sandbox \"db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:12.592790 kubelet[2458]: E1213 14:32:12.592597 2458 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" Dec 13 14:32:12.592790 kubelet[2458]: E1213 14:32:12.592648 2458 kuberuntime_manager.go:1477] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210"} Dec 13 14:32:12.592790 kubelet[2458]: E1213 14:32:12.592685 2458 kuberuntime_manager.go:1077] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"50dce1b7-10b8-45fe-a58b-95a13522c319\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Dec 13 14:32:12.592790 kubelet[2458]: E1213 14:32:12.592717 2458 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"50dce1b7-10b8-45fe-a58b-95a13522c319\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-686fc44668-frvqf" podUID="50dce1b7-10b8-45fe-a58b-95a13522c319" Dec 13 14:32:12.593477 env[1414]: time="2024-12-13T14:32:12.593433549Z" level=error msg="StopPodSandbox for \"791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686\" failed" error="failed to destroy network for sandbox \"791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 14:32:12.593732 kubelet[2458]: E1213 14:32:12.593704 2458 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" Dec 13 14:32:12.593830 kubelet[2458]: E1213 14:32:12.593744 2458 kuberuntime_manager.go:1477] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686"} Dec 13 14:32:12.593830 kubelet[2458]: E1213 14:32:12.593778 2458 kuberuntime_manager.go:1077] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"97d535fd-6d62-48fb-8a31-b56e5e376a53\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Dec 13 14:32:12.593830 kubelet[2458]: E1213 14:32:12.593805 2458 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"97d535fd-6d62-48fb-8a31-b56e5e376a53\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-5fclm" podUID="97d535fd-6d62-48fb-8a31-b56e5e376a53" Dec 13 14:32:23.326364 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2753764356.mount: Deactivated successfully. Dec 13 14:32:23.478000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:32:23.485733 kernel: kauditd_printk_skb: 34 callbacks suppressed Dec 13 14:32:23.485877 kernel: audit: type=1400 audit(1734100343.478:1008): avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:32:23.478000 audit[2277]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0017cd350 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:32:23.521638 kernel: audit: type=1300 audit(1734100343.478:1008): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0017cd350 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:32:23.521833 kernel: audit: type=1327 audit(1734100343.478:1008): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:32:23.478000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:32:23.540926 kernel: audit: type=1400 audit(1734100343.478:1009): avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:32:23.478000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:32:23.478000 audit[2277]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e65480 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:32:23.556747 kernel: audit: type=1300 audit(1734100343.478:1009): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e65480 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:32:23.478000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:32:23.596025 kernel: audit: type=1327 audit(1734100343.478:1009): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:32:23.660747 env[1414]: time="2024-12-13T14:32:23.660682760Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:32:23.709040 env[1414]: time="2024-12-13T14:32:23.708977656Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:feb26d4585d68e875d9bd9bd6c27ea9f2d5c9ed9ef70f8b8cb0ebb0559a1d664,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:32:23.756251 env[1414]: time="2024-12-13T14:32:23.756189449Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:32:23.765000 audit[2312]: AVC avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:32:23.765000 audit[2312]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=64 a1=c001033260 a2=fc6 a3=0 items=0 ppid=2160 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 key=(null) Dec 13 14:32:23.802584 kernel: audit: type=1400 audit(1734100343.765:1010): avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:32:23.802736 kernel: audit: type=1300 audit(1734100343.765:1010): arch=c000003e syscall=254 success=no exit=-13 a0=64 a1=c001033260 a2=fc6 a3=0 items=0 ppid=2160 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 key=(null) Dec 13 14:32:23.802766 kernel: audit: type=1327 audit(1734100343.765:1010): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Dec 13 14:32:23.765000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Dec 13 14:32:23.765000 audit[2312]: AVC avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:32:23.821580 kernel: audit: type=1400 audit(1734100343.765:1011): avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:32:23.823051 env[1414]: time="2024-12-13T14:32:23.823004181Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:99c3917516efe1f807a0cfdf2d14b628b7c5cc6bd8a9ee5a253154f31756bea1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:32:23.823963 env[1414]: time="2024-12-13T14:32:23.823756982Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.29.1\" returns image reference \"sha256:feb26d4585d68e875d9bd9bd6c27ea9f2d5c9ed9ef70f8b8cb0ebb0559a1d664\"" Dec 13 14:32:23.765000 audit[2312]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=64 a1=c00459f400 a2=fc6 a3=0 items=0 ppid=2160 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 key=(null) Dec 13 14:32:23.765000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Dec 13 14:32:23.781000 audit[2312]: AVC avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7362 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:32:23.781000 audit[2312]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=64 a1=c000aead20 a2=fc6 a3=0 items=0 ppid=2160 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 key=(null) Dec 13 14:32:23.781000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Dec 13 14:32:23.782000 audit[2312]: AVC avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:32:23.782000 audit[2312]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=64 a1=c00145ebd0 a2=fc6 a3=0 items=0 ppid=2160 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 key=(null) Dec 13 14:32:23.782000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Dec 13 14:32:23.782000 audit[2312]: AVC avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:32:23.782000 audit[2312]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=64 a1=c00145f8f0 a2=fc6 a3=0 items=0 ppid=2160 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 key=(null) Dec 13 14:32:23.782000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Dec 13 14:32:23.782000 audit[2312]: AVC avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:32:23.782000 audit[2312]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=64 a1=c00459f440 a2=fc6 a3=0 items=0 ppid=2160 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 key=(null) Dec 13 14:32:23.782000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Dec 13 14:32:23.856939 env[1414]: time="2024-12-13T14:32:23.856896848Z" level=info msg="CreateContainer within sandbox \"20a2c38c124635dc9b01a2156cc8850ddca570a0a82a40705df1a0aa9cff962e\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Dec 13 14:32:24.167217 env[1414]: time="2024-12-13T14:32:24.167078858Z" level=info msg="CreateContainer within sandbox \"20a2c38c124635dc9b01a2156cc8850ddca570a0a82a40705df1a0aa9cff962e\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"712c356776dbc5d93ac010df3d5eaba59384f8db14ad44b232867b0e07ff03c4\"" Dec 13 14:32:24.168495 env[1414]: time="2024-12-13T14:32:24.168461861Z" level=info msg="StartContainer for \"712c356776dbc5d93ac010df3d5eaba59384f8db14ad44b232867b0e07ff03c4\"" Dec 13 14:32:24.192013 systemd[1]: Started cri-containerd-712c356776dbc5d93ac010df3d5eaba59384f8db14ad44b232867b0e07ff03c4.scope. Dec 13 14:32:24.210000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.210000 audit[3512]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7fa396b651a8 items=0 ppid=2903 pid=3512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:24.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731326333353637373664626335643933616330313064663364356561 Dec 13 14:32:24.211000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.211000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.211000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.211000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.211000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.211000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.211000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.211000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.211000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.211000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.211000 audit: BPF prog-id=134 op=LOAD Dec 13 14:32:24.211000 audit[3512]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0002983b8 items=0 ppid=2903 pid=3512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:24.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731326333353637373664626335643933616330313064663364356561 Dec 13 14:32:24.211000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.211000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.211000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.211000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.211000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.211000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.211000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.211000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.211000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.211000 audit: BPF prog-id=135 op=LOAD Dec 13 14:32:24.211000 audit[3512]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c000298408 items=0 ppid=2903 pid=3512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:24.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731326333353637373664626335643933616330313064663364356561 Dec 13 14:32:24.212000 audit: BPF prog-id=135 op=UNLOAD Dec 13 14:32:24.212000 audit: BPF prog-id=134 op=UNLOAD Dec 13 14:32:24.212000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.212000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.212000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.212000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.212000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.212000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.212000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.212000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.212000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.212000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:24.212000 audit: BPF prog-id=136 op=LOAD Dec 13 14:32:24.212000 audit[3512]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c000298498 items=0 ppid=2903 pid=3512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:24.212000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731326333353637373664626335643933616330313064663364356561 Dec 13 14:32:24.233079 env[1414]: time="2024-12-13T14:32:24.233020687Z" level=info msg="StartContainer for \"712c356776dbc5d93ac010df3d5eaba59384f8db14ad44b232867b0e07ff03c4\" returns successfully" Dec 13 14:32:24.539105 kubelet[2458]: I1213 14:32:24.537281 2458 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-pcc4p" podStartSLOduration=2.963293666 podStartE2EDuration="37.537257284s" podCreationTimestamp="2024-12-13 14:31:47 +0000 UTC" firstStartedPulling="2024-12-13 14:31:49.251457468 +0000 UTC m=+16.166445217" lastFinishedPulling="2024-12-13 14:32:23.825421186 +0000 UTC m=+50.740408835" observedRunningTime="2024-12-13 14:32:24.536018681 +0000 UTC m=+51.451006430" watchObservedRunningTime="2024-12-13 14:32:24.537257284 +0000 UTC m=+51.452245033" Dec 13 14:32:24.548307 systemd[1]: run-containerd-runc-k8s.io-712c356776dbc5d93ac010df3d5eaba59384f8db14ad44b232867b0e07ff03c4-runc.eSbLzr.mount: Deactivated successfully. Dec 13 14:32:24.633308 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Dec 13 14:32:24.633476 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Dec 13 14:32:25.285326 env[1414]: time="2024-12-13T14:32:25.285268547Z" level=info msg="StopPodSandbox for \"1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7\"" Dec 13 14:32:25.289573 env[1414]: time="2024-12-13T14:32:25.288894954Z" level=info msg="StopPodSandbox for \"d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf\"" Dec 13 14:32:25.289803 env[1414]: time="2024-12-13T14:32:25.289739755Z" level=info msg="StopPodSandbox for \"db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210\"" Dec 13 14:32:25.467935 env[1414]: 2024-12-13 14:32:25.386 [INFO][3626] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" Dec 13 14:32:25.467935 env[1414]: 2024-12-13 14:32:25.386 [INFO][3626] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" iface="eth0" netns="/var/run/netns/cni-e0391d2c-44c5-542a-30c4-9e35ffd7fbbb" Dec 13 14:32:25.467935 env[1414]: 2024-12-13 14:32:25.386 [INFO][3626] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" iface="eth0" netns="/var/run/netns/cni-e0391d2c-44c5-542a-30c4-9e35ffd7fbbb" Dec 13 14:32:25.467935 env[1414]: 2024-12-13 14:32:25.387 [INFO][3626] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" iface="eth0" netns="/var/run/netns/cni-e0391d2c-44c5-542a-30c4-9e35ffd7fbbb" Dec 13 14:32:25.467935 env[1414]: 2024-12-13 14:32:25.387 [INFO][3626] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" Dec 13 14:32:25.467935 env[1414]: 2024-12-13 14:32:25.387 [INFO][3626] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" Dec 13 14:32:25.467935 env[1414]: 2024-12-13 14:32:25.441 [INFO][3652] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" HandleID="k8s-pod-network.1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" Workload="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--9pcc2-eth0" Dec 13 14:32:25.467935 env[1414]: 2024-12-13 14:32:25.441 [INFO][3652] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 14:32:25.467935 env[1414]: 2024-12-13 14:32:25.442 [INFO][3652] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 14:32:25.467935 env[1414]: 2024-12-13 14:32:25.449 [WARNING][3652] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" HandleID="k8s-pod-network.1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" Workload="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--9pcc2-eth0" Dec 13 14:32:25.467935 env[1414]: 2024-12-13 14:32:25.449 [INFO][3652] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" HandleID="k8s-pod-network.1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" Workload="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--9pcc2-eth0" Dec 13 14:32:25.467935 env[1414]: 2024-12-13 14:32:25.451 [INFO][3652] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 14:32:25.467935 env[1414]: 2024-12-13 14:32:25.466 [INFO][3626] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" Dec 13 14:32:25.472153 env[1414]: time="2024-12-13T14:32:25.472100010Z" level=info msg="TearDown network for sandbox \"1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7\" successfully" Dec 13 14:32:25.472166 systemd[1]: run-netns-cni\x2de0391d2c\x2d44c5\x2d542a\x2d30c4\x2d9e35ffd7fbbb.mount: Deactivated successfully. Dec 13 14:32:25.472422 env[1414]: time="2024-12-13T14:32:25.472396311Z" level=info msg="StopPodSandbox for \"1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7\" returns successfully" Dec 13 14:32:25.474360 env[1414]: time="2024-12-13T14:32:25.474325115Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-6f6b679f8f-9pcc2,Uid:ab01c38b-ace9-49a5-9e1f-886c614236ba,Namespace:kube-system,Attempt:1,}" Dec 13 14:32:25.498718 env[1414]: 2024-12-13 14:32:25.394 [INFO][3639] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" Dec 13 14:32:25.498718 env[1414]: 2024-12-13 14:32:25.394 [INFO][3639] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" iface="eth0" netns="/var/run/netns/cni-66536ff5-de79-0e4d-1030-79f257755410" Dec 13 14:32:25.498718 env[1414]: 2024-12-13 14:32:25.395 [INFO][3639] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" iface="eth0" netns="/var/run/netns/cni-66536ff5-de79-0e4d-1030-79f257755410" Dec 13 14:32:25.498718 env[1414]: 2024-12-13 14:32:25.395 [INFO][3639] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" iface="eth0" netns="/var/run/netns/cni-66536ff5-de79-0e4d-1030-79f257755410" Dec 13 14:32:25.498718 env[1414]: 2024-12-13 14:32:25.395 [INFO][3639] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" Dec 13 14:32:25.498718 env[1414]: 2024-12-13 14:32:25.395 [INFO][3639] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" Dec 13 14:32:25.498718 env[1414]: 2024-12-13 14:32:25.466 [INFO][3657] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" HandleID="k8s-pod-network.db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--frvqf-eth0" Dec 13 14:32:25.498718 env[1414]: 2024-12-13 14:32:25.473 [INFO][3657] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 14:32:25.498718 env[1414]: 2024-12-13 14:32:25.473 [INFO][3657] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 14:32:25.498718 env[1414]: 2024-12-13 14:32:25.482 [WARNING][3657] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" HandleID="k8s-pod-network.db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--frvqf-eth0" Dec 13 14:32:25.498718 env[1414]: 2024-12-13 14:32:25.490 [INFO][3657] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" HandleID="k8s-pod-network.db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--frvqf-eth0" Dec 13 14:32:25.498718 env[1414]: 2024-12-13 14:32:25.492 [INFO][3657] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 14:32:25.498718 env[1414]: 2024-12-13 14:32:25.497 [INFO][3639] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" Dec 13 14:32:25.502633 systemd[1]: run-netns-cni\x2d66536ff5\x2dde79\x2d0e4d\x2d1030\x2d79f257755410.mount: Deactivated successfully. Dec 13 14:32:25.503771 env[1414]: time="2024-12-13T14:32:25.502751070Z" level=info msg="TearDown network for sandbox \"db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210\" successfully" Dec 13 14:32:25.503771 env[1414]: time="2024-12-13T14:32:25.502798170Z" level=info msg="StopPodSandbox for \"db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210\" returns successfully" Dec 13 14:32:25.503771 env[1414]: time="2024-12-13T14:32:25.503592272Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-686fc44668-frvqf,Uid:50dce1b7-10b8-45fe-a58b-95a13522c319,Namespace:calico-apiserver,Attempt:1,}" Dec 13 14:32:25.511253 env[1414]: 2024-12-13 14:32:25.412 [INFO][3640] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" Dec 13 14:32:25.511253 env[1414]: 2024-12-13 14:32:25.413 [INFO][3640] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" iface="eth0" netns="/var/run/netns/cni-8b893bf7-9918-6f38-343c-aa0e08bc12e3" Dec 13 14:32:25.511253 env[1414]: 2024-12-13 14:32:25.413 [INFO][3640] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" iface="eth0" netns="/var/run/netns/cni-8b893bf7-9918-6f38-343c-aa0e08bc12e3" Dec 13 14:32:25.511253 env[1414]: 2024-12-13 14:32:25.414 [INFO][3640] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" iface="eth0" netns="/var/run/netns/cni-8b893bf7-9918-6f38-343c-aa0e08bc12e3" Dec 13 14:32:25.511253 env[1414]: 2024-12-13 14:32:25.414 [INFO][3640] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" Dec 13 14:32:25.511253 env[1414]: 2024-12-13 14:32:25.414 [INFO][3640] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" Dec 13 14:32:25.511253 env[1414]: 2024-12-13 14:32:25.484 [INFO][3662] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" HandleID="k8s-pod-network.d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" Dec 13 14:32:25.511253 env[1414]: 2024-12-13 14:32:25.490 [INFO][3662] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 14:32:25.511253 env[1414]: 2024-12-13 14:32:25.492 [INFO][3662] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 14:32:25.511253 env[1414]: 2024-12-13 14:32:25.504 [WARNING][3662] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" HandleID="k8s-pod-network.d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" Dec 13 14:32:25.511253 env[1414]: 2024-12-13 14:32:25.504 [INFO][3662] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" HandleID="k8s-pod-network.d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" Dec 13 14:32:25.511253 env[1414]: 2024-12-13 14:32:25.507 [INFO][3662] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 14:32:25.511253 env[1414]: 2024-12-13 14:32:25.509 [INFO][3640] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" Dec 13 14:32:25.514525 systemd[1]: run-netns-cni\x2d8b893bf7\x2d9918\x2d6f38\x2d343c\x2daa0e08bc12e3.mount: Deactivated successfully. Dec 13 14:32:25.515835 env[1414]: time="2024-12-13T14:32:25.515795596Z" level=info msg="TearDown network for sandbox \"d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf\" successfully" Dec 13 14:32:25.516318 env[1414]: time="2024-12-13T14:32:25.516291096Z" level=info msg="StopPodSandbox for \"d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf\" returns successfully" Dec 13 14:32:25.518791 env[1414]: time="2024-12-13T14:32:25.518752501Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-f9f5cc4c-fjz2l,Uid:6fc9dd3b-fe61-4b81-8279-1d36298429b2,Namespace:calico-system,Attempt:1,}" Dec 13 14:32:25.536010 systemd[1]: run-containerd-runc-k8s.io-712c356776dbc5d93ac010df3d5eaba59384f8db14ad44b232867b0e07ff03c4-runc.VNn8Xy.mount: Deactivated successfully. Dec 13 14:32:25.944000 audit[3743]: AVC avc: denied { write } for pid=3743 comm="tee" name="fd" dev="proc" ino=31216 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Dec 13 14:32:25.944000 audit[3743]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffedd8aaa10 a2=241 a3=1b6 items=1 ppid=3703 pid=3743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:25.944000 audit: CWD cwd="/etc/service/enabled/felix/log" Dec 13 14:32:25.944000 audit: PATH item=0 name="/dev/fd/63" inode=31201 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:32:25.953000 audit[3759]: AVC avc: denied { write } for pid=3759 comm="tee" name="fd" dev="proc" ino=31227 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Dec 13 14:32:25.953000 audit[3759]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe35f5ba01 a2=241 a3=1b6 items=1 ppid=3708 pid=3759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:25.953000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Dec 13 14:32:25.953000 audit: PATH item=0 name="/dev/fd/63" inode=31222 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:32:25.953000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Dec 13 14:32:25.960000 audit[3762]: AVC avc: denied { write } for pid=3762 comm="tee" name="fd" dev="proc" ino=31234 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Dec 13 14:32:25.944000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Dec 13 14:32:25.966000 audit[3747]: AVC avc: denied { write } for pid=3747 comm="tee" name="fd" dev="proc" ino=31239 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Dec 13 14:32:25.960000 audit[3762]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd2225ea12 a2=241 a3=1b6 items=1 ppid=3717 pid=3762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:25.960000 audit: CWD cwd="/etc/service/enabled/cni/log" Dec 13 14:32:25.960000 audit: PATH item=0 name="/dev/fd/63" inode=31231 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:32:25.960000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Dec 13 14:32:25.985000 audit[3766]: AVC avc: denied { write } for pid=3766 comm="tee" name="fd" dev="proc" ino=31247 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Dec 13 14:32:25.966000 audit[3747]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffcdcd67a10 a2=241 a3=1b6 items=1 ppid=3705 pid=3747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:25.966000 audit: CWD cwd="/etc/service/enabled/confd/log" Dec 13 14:32:25.966000 audit: PATH item=0 name="/dev/fd/63" inode=31210 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:32:25.966000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Dec 13 14:32:25.985000 audit[3766]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff81fe8a10 a2=241 a3=1b6 items=1 ppid=3707 pid=3766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:25.985000 audit: CWD cwd="/etc/service/enabled/bird6/log" Dec 13 14:32:25.985000 audit: PATH item=0 name="/dev/fd/63" inode=31235 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:32:25.985000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Dec 13 14:32:25.995000 audit[3769]: AVC avc: denied { write } for pid=3769 comm="tee" name="fd" dev="proc" ino=30268 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Dec 13 14:32:26.008000 audit[3778]: AVC avc: denied { write } for pid=3778 comm="tee" name="fd" dev="proc" ino=30273 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Dec 13 14:32:26.008000 audit[3778]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd079b7a11 a2=241 a3=1b6 items=1 ppid=3712 pid=3778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:25.995000 audit[3769]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd42e37a00 a2=241 a3=1b6 items=1 ppid=3710 pid=3769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.008000 audit: CWD cwd="/etc/service/enabled/bird/log" Dec 13 14:32:26.008000 audit: PATH item=0 name="/dev/fd/63" inode=31243 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:32:25.995000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Dec 13 14:32:26.008000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Dec 13 14:32:25.995000 audit: PATH item=0 name="/dev/fd/63" inode=31236 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:32:25.995000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Dec 13 14:32:26.199000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.199000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.199000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.199000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.199000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.199000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.199000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.199000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.199000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.199000 audit: BPF prog-id=137 op=LOAD Dec 13 14:32:26.199000 audit[3812]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc2aa1f050 a2=98 a3=3 items=0 ppid=3704 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.199000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:32:26.199000 audit: BPF prog-id=137 op=UNLOAD Dec 13 14:32:26.201000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.201000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.201000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.201000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.201000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.201000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.201000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.201000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.201000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.201000 audit: BPF prog-id=138 op=LOAD Dec 13 14:32:26.201000 audit[3812]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc2aa1ee30 a2=74 a3=540051 items=0 ppid=3704 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.201000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:32:26.202000 audit: BPF prog-id=138 op=UNLOAD Dec 13 14:32:26.202000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.202000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.202000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.202000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.202000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.202000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.202000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.202000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.202000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.202000 audit: BPF prog-id=139 op=LOAD Dec 13 14:32:26.202000 audit[3812]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc2aa1ee60 a2=94 a3=2 items=0 ppid=3704 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.202000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:32:26.202000 audit: BPF prog-id=139 op=UNLOAD Dec 13 14:32:26.284762 env[1414]: time="2024-12-13T14:32:26.284715789Z" level=info msg="StopPodSandbox for \"791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686\"" Dec 13 14:32:26.285428 env[1414]: time="2024-12-13T14:32:26.285399890Z" level=info msg="StopPodSandbox for \"0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa\"" Dec 13 14:32:26.439965 env[1414]: 2024-12-13 14:32:26.384 [INFO][3845] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" Dec 13 14:32:26.439965 env[1414]: 2024-12-13 14:32:26.384 [INFO][3845] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" iface="eth0" netns="/var/run/netns/cni-e3b554a2-8fc9-a4c1-d520-6c620814472a" Dec 13 14:32:26.439965 env[1414]: 2024-12-13 14:32:26.385 [INFO][3845] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" iface="eth0" netns="/var/run/netns/cni-e3b554a2-8fc9-a4c1-d520-6c620814472a" Dec 13 14:32:26.439965 env[1414]: 2024-12-13 14:32:26.385 [INFO][3845] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" iface="eth0" netns="/var/run/netns/cni-e3b554a2-8fc9-a4c1-d520-6c620814472a" Dec 13 14:32:26.439965 env[1414]: 2024-12-13 14:32:26.385 [INFO][3845] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" Dec 13 14:32:26.439965 env[1414]: 2024-12-13 14:32:26.386 [INFO][3845] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" Dec 13 14:32:26.439965 env[1414]: 2024-12-13 14:32:26.428 [INFO][3854] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" HandleID="k8s-pod-network.0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--wmp2w-eth0" Dec 13 14:32:26.439965 env[1414]: 2024-12-13 14:32:26.428 [INFO][3854] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 14:32:26.439965 env[1414]: 2024-12-13 14:32:26.428 [INFO][3854] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 14:32:26.439965 env[1414]: 2024-12-13 14:32:26.435 [WARNING][3854] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" HandleID="k8s-pod-network.0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--wmp2w-eth0" Dec 13 14:32:26.439965 env[1414]: 2024-12-13 14:32:26.435 [INFO][3854] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" HandleID="k8s-pod-network.0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--wmp2w-eth0" Dec 13 14:32:26.439965 env[1414]: 2024-12-13 14:32:26.437 [INFO][3854] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 14:32:26.439965 env[1414]: 2024-12-13 14:32:26.438 [INFO][3845] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" Dec 13 14:32:26.440922 env[1414]: time="2024-12-13T14:32:26.440865691Z" level=info msg="TearDown network for sandbox \"0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa\" successfully" Dec 13 14:32:26.441725 env[1414]: time="2024-12-13T14:32:26.441685493Z" level=info msg="StopPodSandbox for \"0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa\" returns successfully" Dec 13 14:32:26.442587 env[1414]: time="2024-12-13T14:32:26.442553994Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-686fc44668-wmp2w,Uid:a16f2d4c-353e-4324-a00d-1da60b685d6a,Namespace:calico-apiserver,Attempt:1,}" Dec 13 14:32:26.449187 env[1414]: 2024-12-13 14:32:26.387 [INFO][3837] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" Dec 13 14:32:26.449187 env[1414]: 2024-12-13 14:32:26.387 [INFO][3837] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" iface="eth0" netns="/var/run/netns/cni-9c7d60f2-15e5-31db-3e96-2698d505372d" Dec 13 14:32:26.449187 env[1414]: 2024-12-13 14:32:26.387 [INFO][3837] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" iface="eth0" netns="/var/run/netns/cni-9c7d60f2-15e5-31db-3e96-2698d505372d" Dec 13 14:32:26.449187 env[1414]: 2024-12-13 14:32:26.388 [INFO][3837] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" iface="eth0" netns="/var/run/netns/cni-9c7d60f2-15e5-31db-3e96-2698d505372d" Dec 13 14:32:26.449187 env[1414]: 2024-12-13 14:32:26.388 [INFO][3837] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" Dec 13 14:32:26.449187 env[1414]: 2024-12-13 14:32:26.388 [INFO][3837] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" Dec 13 14:32:26.449187 env[1414]: 2024-12-13 14:32:26.430 [INFO][3855] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" HandleID="k8s-pod-network.791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" Workload="ci--3510.3.6--a--f6adf0345d-k8s-csi--node--driver--5fclm-eth0" Dec 13 14:32:26.449187 env[1414]: 2024-12-13 14:32:26.430 [INFO][3855] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 14:32:26.449187 env[1414]: 2024-12-13 14:32:26.437 [INFO][3855] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 14:32:26.449187 env[1414]: 2024-12-13 14:32:26.445 [WARNING][3855] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" HandleID="k8s-pod-network.791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" Workload="ci--3510.3.6--a--f6adf0345d-k8s-csi--node--driver--5fclm-eth0" Dec 13 14:32:26.449187 env[1414]: 2024-12-13 14:32:26.445 [INFO][3855] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" HandleID="k8s-pod-network.791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" Workload="ci--3510.3.6--a--f6adf0345d-k8s-csi--node--driver--5fclm-eth0" Dec 13 14:32:26.449187 env[1414]: 2024-12-13 14:32:26.447 [INFO][3855] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 14:32:26.449187 env[1414]: 2024-12-13 14:32:26.447 [INFO][3837] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" Dec 13 14:32:26.449814 env[1414]: time="2024-12-13T14:32:26.449217507Z" level=info msg="TearDown network for sandbox \"791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686\" successfully" Dec 13 14:32:26.449814 env[1414]: time="2024-12-13T14:32:26.449255907Z" level=info msg="StopPodSandbox for \"791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686\" returns successfully" Dec 13 14:32:26.452291 env[1414]: time="2024-12-13T14:32:26.449994209Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-5fclm,Uid:97d535fd-6d62-48fb-8a31-b56e5e376a53,Namespace:calico-system,Attempt:1,}" Dec 13 14:32:26.472059 systemd[1]: run-netns-cni\x2d9c7d60f2\x2d15e5\x2d31db\x2d3e96\x2d2698d505372d.mount: Deactivated successfully. Dec 13 14:32:26.472167 systemd[1]: run-netns-cni\x2de3b554a2\x2d8fc9\x2da4c1\x2dd520\x2d6c620814472a.mount: Deactivated successfully. Dec 13 14:32:26.475000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.475000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.475000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.475000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.475000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.475000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.475000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.475000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.475000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.475000 audit: BPF prog-id=140 op=LOAD Dec 13 14:32:26.475000 audit[3812]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc2aa1ed20 a2=40 a3=1 items=0 ppid=3704 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.475000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:32:26.475000 audit: BPF prog-id=140 op=UNLOAD Dec 13 14:32:26.475000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.475000 audit[3812]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffc2aa1edf0 a2=50 a3=7ffc2aa1eed0 items=0 ppid=3704 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.475000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc2aa1ed30 a2=28 a3=0 items=0 ppid=3704 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.496000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc2aa1ed60 a2=28 a3=0 items=0 ppid=3704 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.496000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc2aa1ec70 a2=28 a3=0 items=0 ppid=3704 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.496000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc2aa1ed80 a2=28 a3=0 items=0 ppid=3704 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.496000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc2aa1ed60 a2=28 a3=0 items=0 ppid=3704 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.496000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc2aa1ed50 a2=28 a3=0 items=0 ppid=3704 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.496000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc2aa1ed80 a2=28 a3=0 items=0 ppid=3704 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.496000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc2aa1ed60 a2=28 a3=0 items=0 ppid=3704 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.496000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc2aa1ed80 a2=28 a3=0 items=0 ppid=3704 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.496000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc2aa1ed50 a2=28 a3=0 items=0 ppid=3704 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.496000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc2aa1edc0 a2=28 a3=0 items=0 ppid=3704 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.496000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc2aa1eb70 a2=50 a3=1 items=0 ppid=3704 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.496000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit: BPF prog-id=141 op=LOAD Dec 13 14:32:26.496000 audit[3812]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc2aa1eb70 a2=94 a3=5 items=0 ppid=3704 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.496000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:32:26.496000 audit: BPF prog-id=141 op=UNLOAD Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc2aa1ec20 a2=50 a3=1 items=0 ppid=3704 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.496000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffc2aa1ed40 a2=4 a3=38 items=0 ppid=3704 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.496000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.496000 audit[3812]: AVC avc: denied { confidentiality } for pid=3812 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Dec 13 14:32:26.496000 audit[3812]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc2aa1ed90 a2=94 a3=6 items=0 ppid=3704 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.496000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:32:26.497000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.497000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.497000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.497000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.497000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.497000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.497000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.497000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.497000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.497000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.497000 audit[3812]: AVC avc: denied { confidentiality } for pid=3812 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Dec 13 14:32:26.497000 audit[3812]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc2aa1e540 a2=94 a3=83 items=0 ppid=3704 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.497000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:32:26.497000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.497000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.497000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.497000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.497000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.497000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.497000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.497000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.497000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.497000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.497000 audit[3812]: AVC avc: denied { confidentiality } for pid=3812 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Dec 13 14:32:26.497000 audit[3812]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc2aa1e540 a2=94 a3=83 items=0 ppid=3704 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.497000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:32:26.506000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.506000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.506000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.506000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.506000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.506000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.506000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.506000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.506000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.506000 audit: BPF prog-id=142 op=LOAD Dec 13 14:32:26.506000 audit[3868]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffec5db6a50 a2=98 a3=1999999999999999 items=0 ppid=3704 pid=3868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.506000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Dec 13 14:32:26.506000 audit: BPF prog-id=142 op=UNLOAD Dec 13 14:32:26.506000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.506000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.506000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.506000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.506000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.506000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.506000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.506000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.506000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.506000 audit: BPF prog-id=143 op=LOAD Dec 13 14:32:26.506000 audit[3868]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffec5db6930 a2=74 a3=ffff items=0 ppid=3704 pid=3868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.506000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Dec 13 14:32:26.506000 audit: BPF prog-id=143 op=UNLOAD Dec 13 14:32:26.506000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.506000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.506000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.506000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.506000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.506000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.506000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.506000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.506000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.506000 audit: BPF prog-id=144 op=LOAD Dec 13 14:32:26.506000 audit[3868]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffec5db6970 a2=40 a3=7ffec5db6b50 items=0 ppid=3704 pid=3868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.506000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Dec 13 14:32:26.506000 audit: BPF prog-id=144 op=UNLOAD Dec 13 14:32:26.725319 systemd-networkd[1577]: vxlan.calico: Link UP Dec 13 14:32:26.725328 systemd-networkd[1577]: vxlan.calico: Gained carrier Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit: BPF prog-id=145 op=LOAD Dec 13 14:32:26.762000 audit[3907]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc11884a60 a2=98 a3=ffffffff items=0 ppid=3704 pid=3907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.762000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:32:26.762000 audit: BPF prog-id=145 op=UNLOAD Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit: BPF prog-id=146 op=LOAD Dec 13 14:32:26.762000 audit[3907]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc11884870 a2=74 a3=540051 items=0 ppid=3704 pid=3907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.762000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:32:26.762000 audit: BPF prog-id=146 op=UNLOAD Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit: BPF prog-id=147 op=LOAD Dec 13 14:32:26.762000 audit[3907]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc118848a0 a2=94 a3=2 items=0 ppid=3704 pid=3907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.762000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:32:26.762000 audit: BPF prog-id=147 op=UNLOAD Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc11884770 a2=28 a3=0 items=0 ppid=3704 pid=3907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.762000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc118847a0 a2=28 a3=0 items=0 ppid=3704 pid=3907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.762000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc118846b0 a2=28 a3=0 items=0 ppid=3704 pid=3907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.762000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc118847c0 a2=28 a3=0 items=0 ppid=3704 pid=3907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.762000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc118847a0 a2=28 a3=0 items=0 ppid=3704 pid=3907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.762000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc11884790 a2=28 a3=0 items=0 ppid=3704 pid=3907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.762000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc118847c0 a2=28 a3=0 items=0 ppid=3704 pid=3907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.762000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc118847a0 a2=28 a3=0 items=0 ppid=3704 pid=3907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.762000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc118847c0 a2=28 a3=0 items=0 ppid=3704 pid=3907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.762000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc11884790 a2=28 a3=0 items=0 ppid=3704 pid=3907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.762000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:32:26.762000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.762000 audit[3907]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc11884800 a2=28 a3=0 items=0 ppid=3704 pid=3907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.762000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:32:26.764000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.764000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.764000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.764000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.764000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.764000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.764000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.764000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.764000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.764000 audit: BPF prog-id=148 op=LOAD Dec 13 14:32:26.764000 audit[3907]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc11884670 a2=40 a3=0 items=0 ppid=3704 pid=3907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.764000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:32:26.770000 audit: BPF prog-id=148 op=UNLOAD Dec 13 14:32:26.770000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.770000 audit[3907]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffc11884660 a2=50 a3=2800 items=0 ppid=3704 pid=3907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.770000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:32:26.770000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.770000 audit[3907]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffc11884660 a2=50 a3=2800 items=0 ppid=3704 pid=3907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.770000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:32:26.770000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.770000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.770000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.770000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.770000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.770000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.770000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.770000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.770000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.770000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.770000 audit: BPF prog-id=149 op=LOAD Dec 13 14:32:26.770000 audit[3907]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc11883e80 a2=94 a3=2 items=0 ppid=3704 pid=3907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.770000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:32:26.770000 audit: BPF prog-id=149 op=UNLOAD Dec 13 14:32:26.770000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.770000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.770000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.770000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.770000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.770000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.770000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.770000 audit[3907]: AVC avc: denied { perfmon } for pid=3907 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.770000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.770000 audit[3907]: AVC avc: denied { bpf } for pid=3907 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.770000 audit: BPF prog-id=150 op=LOAD Dec 13 14:32:26.770000 audit[3907]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc11883f80 a2=94 a3=2d items=0 ppid=3704 pid=3907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.770000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:32:26.788000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.788000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.788000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.788000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.788000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.788000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.788000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.788000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.788000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.788000 audit: BPF prog-id=151 op=LOAD Dec 13 14:32:26.788000 audit[3912]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffdb3364b50 a2=98 a3=0 items=0 ppid=3704 pid=3912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.788000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:32:26.788000 audit: BPF prog-id=151 op=UNLOAD Dec 13 14:32:26.788000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.788000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.788000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.788000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.788000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.788000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.788000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.788000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.788000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.788000 audit: BPF prog-id=152 op=LOAD Dec 13 14:32:26.788000 audit[3912]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffdb3364930 a2=74 a3=540051 items=0 ppid=3704 pid=3912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.788000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:32:26.788000 audit: BPF prog-id=152 op=UNLOAD Dec 13 14:32:26.788000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.788000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.788000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.788000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.788000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.788000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.788000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.788000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.788000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:26.788000 audit: BPF prog-id=153 op=LOAD Dec 13 14:32:26.788000 audit[3912]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffdb3364960 a2=94 a3=2 items=0 ppid=3704 pid=3912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:26.788000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:32:26.789000 audit: BPF prog-id=153 op=UNLOAD Dec 13 14:32:26.902106 systemd-networkd[1577]: cali0dcb527601a: Link UP Dec 13 14:32:26.916696 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0dcb527601a: link becomes ready Dec 13 14:32:26.917075 systemd-networkd[1577]: cali0dcb527601a: Gained carrier Dec 13 14:32:26.941170 env[1414]: 2024-12-13 14:32:26.778 [INFO][3883] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--frvqf-eth0 calico-apiserver-686fc44668- calico-apiserver 50dce1b7-10b8-45fe-a58b-95a13522c319 814 0 2024-12-13 14:31:48 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:686fc44668 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.6-a-f6adf0345d calico-apiserver-686fc44668-frvqf eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali0dcb527601a [] []}} ContainerID="8fed8093e657db879e1e6e6ceac1aece6cc0b64b157ddca361d18e14c2d2832a" Namespace="calico-apiserver" Pod="calico-apiserver-686fc44668-frvqf" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--frvqf-" Dec 13 14:32:26.941170 env[1414]: 2024-12-13 14:32:26.778 [INFO][3883] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="8fed8093e657db879e1e6e6ceac1aece6cc0b64b157ddca361d18e14c2d2832a" Namespace="calico-apiserver" Pod="calico-apiserver-686fc44668-frvqf" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--frvqf-eth0" Dec 13 14:32:26.941170 env[1414]: 2024-12-13 14:32:26.846 [INFO][3911] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8fed8093e657db879e1e6e6ceac1aece6cc0b64b157ddca361d18e14c2d2832a" HandleID="k8s-pod-network.8fed8093e657db879e1e6e6ceac1aece6cc0b64b157ddca361d18e14c2d2832a" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--frvqf-eth0" Dec 13 14:32:26.941170 env[1414]: 2024-12-13 14:32:26.857 [INFO][3911] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="8fed8093e657db879e1e6e6ceac1aece6cc0b64b157ddca361d18e14c2d2832a" HandleID="k8s-pod-network.8fed8093e657db879e1e6e6ceac1aece6cc0b64b157ddca361d18e14c2d2832a" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--frvqf-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000319130), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.6-a-f6adf0345d", "pod":"calico-apiserver-686fc44668-frvqf", "timestamp":"2024-12-13 14:32:26.846158175 +0000 UTC"}, Hostname:"ci-3510.3.6-a-f6adf0345d", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Dec 13 14:32:26.941170 env[1414]: 2024-12-13 14:32:26.857 [INFO][3911] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 14:32:26.941170 env[1414]: 2024-12-13 14:32:26.858 [INFO][3911] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 14:32:26.941170 env[1414]: 2024-12-13 14:32:26.858 [INFO][3911] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.6-a-f6adf0345d' Dec 13 14:32:26.941170 env[1414]: 2024-12-13 14:32:26.861 [INFO][3911] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.8fed8093e657db879e1e6e6ceac1aece6cc0b64b157ddca361d18e14c2d2832a" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:26.941170 env[1414]: 2024-12-13 14:32:26.865 [INFO][3911] ipam/ipam.go 372: Looking up existing affinities for host host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:26.941170 env[1414]: 2024-12-13 14:32:26.870 [INFO][3911] ipam/ipam.go 489: Trying affinity for 192.168.37.64/26 host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:26.941170 env[1414]: 2024-12-13 14:32:26.873 [INFO][3911] ipam/ipam.go 155: Attempting to load block cidr=192.168.37.64/26 host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:26.941170 env[1414]: 2024-12-13 14:32:26.878 [INFO][3911] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.37.64/26 host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:26.941170 env[1414]: 2024-12-13 14:32:26.878 [INFO][3911] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.37.64/26 handle="k8s-pod-network.8fed8093e657db879e1e6e6ceac1aece6cc0b64b157ddca361d18e14c2d2832a" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:26.941170 env[1414]: 2024-12-13 14:32:26.881 [INFO][3911] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.8fed8093e657db879e1e6e6ceac1aece6cc0b64b157ddca361d18e14c2d2832a Dec 13 14:32:26.941170 env[1414]: 2024-12-13 14:32:26.889 [INFO][3911] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.37.64/26 handle="k8s-pod-network.8fed8093e657db879e1e6e6ceac1aece6cc0b64b157ddca361d18e14c2d2832a" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:26.941170 env[1414]: 2024-12-13 14:32:26.897 [INFO][3911] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.37.65/26] block=192.168.37.64/26 handle="k8s-pod-network.8fed8093e657db879e1e6e6ceac1aece6cc0b64b157ddca361d18e14c2d2832a" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:26.941170 env[1414]: 2024-12-13 14:32:26.897 [INFO][3911] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.37.65/26] handle="k8s-pod-network.8fed8093e657db879e1e6e6ceac1aece6cc0b64b157ddca361d18e14c2d2832a" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:26.941170 env[1414]: 2024-12-13 14:32:26.897 [INFO][3911] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 14:32:26.941170 env[1414]: 2024-12-13 14:32:26.897 [INFO][3911] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.37.65/26] IPv6=[] ContainerID="8fed8093e657db879e1e6e6ceac1aece6cc0b64b157ddca361d18e14c2d2832a" HandleID="k8s-pod-network.8fed8093e657db879e1e6e6ceac1aece6cc0b64b157ddca361d18e14c2d2832a" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--frvqf-eth0" Dec 13 14:32:26.942170 env[1414]: 2024-12-13 14:32:26.899 [INFO][3883] cni-plugin/k8s.go 386: Populated endpoint ContainerID="8fed8093e657db879e1e6e6ceac1aece6cc0b64b157ddca361d18e14c2d2832a" Namespace="calico-apiserver" Pod="calico-apiserver-686fc44668-frvqf" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--frvqf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--frvqf-eth0", GenerateName:"calico-apiserver-686fc44668-", Namespace:"calico-apiserver", SelfLink:"", UID:"50dce1b7-10b8-45fe-a58b-95a13522c319", ResourceVersion:"814", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 14, 31, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"686fc44668", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.6-a-f6adf0345d", ContainerID:"", Pod:"calico-apiserver-686fc44668-frvqf", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.37.65/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali0dcb527601a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 14:32:26.942170 env[1414]: 2024-12-13 14:32:26.899 [INFO][3883] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.37.65/32] ContainerID="8fed8093e657db879e1e6e6ceac1aece6cc0b64b157ddca361d18e14c2d2832a" Namespace="calico-apiserver" Pod="calico-apiserver-686fc44668-frvqf" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--frvqf-eth0" Dec 13 14:32:26.942170 env[1414]: 2024-12-13 14:32:26.899 [INFO][3883] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali0dcb527601a ContainerID="8fed8093e657db879e1e6e6ceac1aece6cc0b64b157ddca361d18e14c2d2832a" Namespace="calico-apiserver" Pod="calico-apiserver-686fc44668-frvqf" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--frvqf-eth0" Dec 13 14:32:26.942170 env[1414]: 2024-12-13 14:32:26.922 [INFO][3883] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8fed8093e657db879e1e6e6ceac1aece6cc0b64b157ddca361d18e14c2d2832a" Namespace="calico-apiserver" Pod="calico-apiserver-686fc44668-frvqf" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--frvqf-eth0" Dec 13 14:32:26.942170 env[1414]: 2024-12-13 14:32:26.922 [INFO][3883] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="8fed8093e657db879e1e6e6ceac1aece6cc0b64b157ddca361d18e14c2d2832a" Namespace="calico-apiserver" Pod="calico-apiserver-686fc44668-frvqf" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--frvqf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--frvqf-eth0", GenerateName:"calico-apiserver-686fc44668-", Namespace:"calico-apiserver", SelfLink:"", UID:"50dce1b7-10b8-45fe-a58b-95a13522c319", ResourceVersion:"814", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 14, 31, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"686fc44668", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.6-a-f6adf0345d", ContainerID:"8fed8093e657db879e1e6e6ceac1aece6cc0b64b157ddca361d18e14c2d2832a", Pod:"calico-apiserver-686fc44668-frvqf", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.37.65/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali0dcb527601a", MAC:"2e:44:02:6d:a2:5d", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 14:32:26.942170 env[1414]: 2024-12-13 14:32:26.939 [INFO][3883] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="8fed8093e657db879e1e6e6ceac1aece6cc0b64b157ddca361d18e14c2d2832a" Namespace="calico-apiserver" Pod="calico-apiserver-686fc44668-frvqf" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--frvqf-eth0" Dec 13 14:32:27.033734 systemd-networkd[1577]: cali2132811616a: Link UP Dec 13 14:32:27.046252 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali2132811616a: link becomes ready Dec 13 14:32:27.045867 systemd-networkd[1577]: cali2132811616a: Gained carrier Dec 13 14:32:27.064280 env[1414]: 2024-12-13 14:32:26.943 [INFO][3919] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--9pcc2-eth0 coredns-6f6b679f8f- kube-system ab01c38b-ace9-49a5-9e1f-886c614236ba 813 0 2024-12-13 14:31:33 +0000 UTC map[k8s-app:kube-dns pod-template-hash:6f6b679f8f projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.6-a-f6adf0345d coredns-6f6b679f8f-9pcc2 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali2132811616a [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="56f96db0c8ce71d6706d14f9ac224f77e4296def683dda756561b885e8963004" Namespace="kube-system" Pod="coredns-6f6b679f8f-9pcc2" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--9pcc2-" Dec 13 14:32:27.064280 env[1414]: 2024-12-13 14:32:26.943 [INFO][3919] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="56f96db0c8ce71d6706d14f9ac224f77e4296def683dda756561b885e8963004" Namespace="kube-system" Pod="coredns-6f6b679f8f-9pcc2" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--9pcc2-eth0" Dec 13 14:32:27.064280 env[1414]: 2024-12-13 14:32:26.988 [INFO][3943] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="56f96db0c8ce71d6706d14f9ac224f77e4296def683dda756561b885e8963004" HandleID="k8s-pod-network.56f96db0c8ce71d6706d14f9ac224f77e4296def683dda756561b885e8963004" Workload="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--9pcc2-eth0" Dec 13 14:32:27.064280 env[1414]: 2024-12-13 14:32:26.999 [INFO][3943] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="56f96db0c8ce71d6706d14f9ac224f77e4296def683dda756561b885e8963004" HandleID="k8s-pod-network.56f96db0c8ce71d6706d14f9ac224f77e4296def683dda756561b885e8963004" Workload="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--9pcc2-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0004e0870), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.6-a-f6adf0345d", "pod":"coredns-6f6b679f8f-9pcc2", "timestamp":"2024-12-13 14:32:26.988966451 +0000 UTC"}, Hostname:"ci-3510.3.6-a-f6adf0345d", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Dec 13 14:32:27.064280 env[1414]: 2024-12-13 14:32:26.999 [INFO][3943] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 14:32:27.064280 env[1414]: 2024-12-13 14:32:26.999 [INFO][3943] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 14:32:27.064280 env[1414]: 2024-12-13 14:32:26.999 [INFO][3943] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.6-a-f6adf0345d' Dec 13 14:32:27.064280 env[1414]: 2024-12-13 14:32:27.001 [INFO][3943] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.56f96db0c8ce71d6706d14f9ac224f77e4296def683dda756561b885e8963004" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.064280 env[1414]: 2024-12-13 14:32:27.005 [INFO][3943] ipam/ipam.go 372: Looking up existing affinities for host host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.064280 env[1414]: 2024-12-13 14:32:27.010 [INFO][3943] ipam/ipam.go 489: Trying affinity for 192.168.37.64/26 host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.064280 env[1414]: 2024-12-13 14:32:27.012 [INFO][3943] ipam/ipam.go 155: Attempting to load block cidr=192.168.37.64/26 host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.064280 env[1414]: 2024-12-13 14:32:27.014 [INFO][3943] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.37.64/26 host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.064280 env[1414]: 2024-12-13 14:32:27.014 [INFO][3943] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.37.64/26 handle="k8s-pod-network.56f96db0c8ce71d6706d14f9ac224f77e4296def683dda756561b885e8963004" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.064280 env[1414]: 2024-12-13 14:32:27.015 [INFO][3943] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.56f96db0c8ce71d6706d14f9ac224f77e4296def683dda756561b885e8963004 Dec 13 14:32:27.064280 env[1414]: 2024-12-13 14:32:27.020 [INFO][3943] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.37.64/26 handle="k8s-pod-network.56f96db0c8ce71d6706d14f9ac224f77e4296def683dda756561b885e8963004" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.064280 env[1414]: 2024-12-13 14:32:27.029 [INFO][3943] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.37.66/26] block=192.168.37.64/26 handle="k8s-pod-network.56f96db0c8ce71d6706d14f9ac224f77e4296def683dda756561b885e8963004" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.064280 env[1414]: 2024-12-13 14:32:27.029 [INFO][3943] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.37.66/26] handle="k8s-pod-network.56f96db0c8ce71d6706d14f9ac224f77e4296def683dda756561b885e8963004" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.064280 env[1414]: 2024-12-13 14:32:27.029 [INFO][3943] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 14:32:27.064280 env[1414]: 2024-12-13 14:32:27.029 [INFO][3943] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.37.66/26] IPv6=[] ContainerID="56f96db0c8ce71d6706d14f9ac224f77e4296def683dda756561b885e8963004" HandleID="k8s-pod-network.56f96db0c8ce71d6706d14f9ac224f77e4296def683dda756561b885e8963004" Workload="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--9pcc2-eth0" Dec 13 14:32:27.065200 env[1414]: 2024-12-13 14:32:27.031 [INFO][3919] cni-plugin/k8s.go 386: Populated endpoint ContainerID="56f96db0c8ce71d6706d14f9ac224f77e4296def683dda756561b885e8963004" Namespace="kube-system" Pod="coredns-6f6b679f8f-9pcc2" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--9pcc2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--9pcc2-eth0", GenerateName:"coredns-6f6b679f8f-", Namespace:"kube-system", SelfLink:"", UID:"ab01c38b-ace9-49a5-9e1f-886c614236ba", ResourceVersion:"813", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 14, 31, 33, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"6f6b679f8f", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.6-a-f6adf0345d", ContainerID:"", Pod:"coredns-6f6b679f8f-9pcc2", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.37.66/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2132811616a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 14:32:27.065200 env[1414]: 2024-12-13 14:32:27.031 [INFO][3919] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.37.66/32] ContainerID="56f96db0c8ce71d6706d14f9ac224f77e4296def683dda756561b885e8963004" Namespace="kube-system" Pod="coredns-6f6b679f8f-9pcc2" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--9pcc2-eth0" Dec 13 14:32:27.065200 env[1414]: 2024-12-13 14:32:27.031 [INFO][3919] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali2132811616a ContainerID="56f96db0c8ce71d6706d14f9ac224f77e4296def683dda756561b885e8963004" Namespace="kube-system" Pod="coredns-6f6b679f8f-9pcc2" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--9pcc2-eth0" Dec 13 14:32:27.065200 env[1414]: 2024-12-13 14:32:27.047 [INFO][3919] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="56f96db0c8ce71d6706d14f9ac224f77e4296def683dda756561b885e8963004" Namespace="kube-system" Pod="coredns-6f6b679f8f-9pcc2" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--9pcc2-eth0" Dec 13 14:32:27.065200 env[1414]: 2024-12-13 14:32:27.047 [INFO][3919] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="56f96db0c8ce71d6706d14f9ac224f77e4296def683dda756561b885e8963004" Namespace="kube-system" Pod="coredns-6f6b679f8f-9pcc2" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--9pcc2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--9pcc2-eth0", GenerateName:"coredns-6f6b679f8f-", Namespace:"kube-system", SelfLink:"", UID:"ab01c38b-ace9-49a5-9e1f-886c614236ba", ResourceVersion:"813", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 14, 31, 33, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"6f6b679f8f", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.6-a-f6adf0345d", ContainerID:"56f96db0c8ce71d6706d14f9ac224f77e4296def683dda756561b885e8963004", Pod:"coredns-6f6b679f8f-9pcc2", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.37.66/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2132811616a", MAC:"f6:65:ce:54:f1:e9", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 14:32:27.065200 env[1414]: 2024-12-13 14:32:27.061 [INFO][3919] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="56f96db0c8ce71d6706d14f9ac224f77e4296def683dda756561b885e8963004" Namespace="kube-system" Pod="coredns-6f6b679f8f-9pcc2" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--9pcc2-eth0" Dec 13 14:32:27.083000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.083000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.083000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.083000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.083000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.083000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.083000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.083000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.083000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.083000 audit: BPF prog-id=154 op=LOAD Dec 13 14:32:27.083000 audit[3912]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffdb3364820 a2=40 a3=1 items=0 ppid=3704 pid=3912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.083000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:32:27.084000 audit: BPF prog-id=154 op=UNLOAD Dec 13 14:32:27.084000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.084000 audit[3912]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffdb33648f0 a2=50 a3=7ffdb33649d0 items=0 ppid=3704 pid=3912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.084000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:32:27.094000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.094000 audit[3912]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdb3364830 a2=28 a3=0 items=0 ppid=3704 pid=3912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.094000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:32:27.094000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.094000 audit[3912]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdb3364860 a2=28 a3=0 items=0 ppid=3704 pid=3912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.094000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:32:27.094000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.094000 audit[3912]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdb3364770 a2=28 a3=0 items=0 ppid=3704 pid=3912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.094000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:32:27.094000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.094000 audit[3912]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdb3364880 a2=28 a3=0 items=0 ppid=3704 pid=3912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.094000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:32:27.094000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.094000 audit[3912]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdb3364860 a2=28 a3=0 items=0 ppid=3704 pid=3912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.094000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:32:27.094000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.094000 audit[3912]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdb3364850 a2=28 a3=0 items=0 ppid=3704 pid=3912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.094000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:32:27.094000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.094000 audit[3912]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdb3364880 a2=28 a3=0 items=0 ppid=3704 pid=3912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.094000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:32:27.094000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.094000 audit[3912]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdb3364860 a2=28 a3=0 items=0 ppid=3704 pid=3912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.094000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:32:27.094000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.094000 audit[3912]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdb3364880 a2=28 a3=0 items=0 ppid=3704 pid=3912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.094000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:32:27.094000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.094000 audit[3912]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdb3364850 a2=28 a3=0 items=0 ppid=3704 pid=3912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.094000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:32:27.094000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.094000 audit[3912]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdb33648c0 a2=28 a3=0 items=0 ppid=3704 pid=3912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.094000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffdb3364670 a2=50 a3=1 items=0 ppid=3704 pid=3912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.095000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit: BPF prog-id=155 op=LOAD Dec 13 14:32:27.095000 audit[3912]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffdb3364670 a2=94 a3=5 items=0 ppid=3704 pid=3912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.095000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:32:27.095000 audit: BPF prog-id=155 op=UNLOAD Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffdb3364720 a2=50 a3=1 items=0 ppid=3704 pid=3912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.095000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffdb3364840 a2=4 a3=38 items=0 ppid=3704 pid=3912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.095000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { confidentiality } for pid=3912 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Dec 13 14:32:27.095000 audit[3912]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffdb3364890 a2=94 a3=6 items=0 ppid=3704 pid=3912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.095000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { confidentiality } for pid=3912 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Dec 13 14:32:27.095000 audit[3912]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffdb3364040 a2=94 a3=83 items=0 ppid=3704 pid=3912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.095000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { perfmon } for pid=3912 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.095000 audit[3912]: AVC avc: denied { confidentiality } for pid=3912 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Dec 13 14:32:27.095000 audit[3912]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffdb3364040 a2=94 a3=83 items=0 ppid=3704 pid=3912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.095000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:32:27.096000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.096000 audit[3912]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffdb3365a80 a2=10 a3=f1f00800 items=0 ppid=3704 pid=3912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.096000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:32:27.096000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.096000 audit[3912]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffdb3365920 a2=10 a3=3 items=0 ppid=3704 pid=3912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.096000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:32:27.096000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.096000 audit[3912]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffdb33658c0 a2=10 a3=3 items=0 ppid=3704 pid=3912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.096000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:32:27.096000 audit[3912]: AVC avc: denied { bpf } for pid=3912 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.096000 audit[3912]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffdb33658c0 a2=10 a3=7 items=0 ppid=3704 pid=3912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.096000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:32:27.103000 audit: BPF prog-id=150 op=UNLOAD Dec 13 14:32:27.240395 env[1414]: time="2024-12-13T14:32:27.240298734Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Dec 13 14:32:27.240395 env[1414]: time="2024-12-13T14:32:27.240356934Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Dec 13 14:32:27.240659 env[1414]: time="2024-12-13T14:32:27.240371634Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Dec 13 14:32:27.241596 env[1414]: time="2024-12-13T14:32:27.241496736Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8fed8093e657db879e1e6e6ceac1aece6cc0b64b157ddca361d18e14c2d2832a pid=3998 runtime=io.containerd.runc.v2 Dec 13 14:32:27.269403 systemd[1]: Started cri-containerd-8fed8093e657db879e1e6e6ceac1aece6cc0b64b157ddca361d18e14c2d2832a.scope. Dec 13 14:32:27.286339 systemd-networkd[1577]: calicb7f7d8050a: Link UP Dec 13 14:32:27.292778 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calicb7f7d8050a: link becomes ready Dec 13 14:32:27.292535 systemd-networkd[1577]: calicb7f7d8050a: Gained carrier Dec 13 14:32:27.315781 env[1414]: 2024-12-13 14:32:27.193 [INFO][3972] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0 calico-kube-controllers-f9f5cc4c- calico-system 6fc9dd3b-fe61-4b81-8279-1d36298429b2 816 0 2024-12-13 14:31:47 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:f9f5cc4c projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ci-3510.3.6-a-f6adf0345d calico-kube-controllers-f9f5cc4c-fjz2l eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calicb7f7d8050a [] []}} ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Namespace="calico-system" Pod="calico-kube-controllers-f9f5cc4c-fjz2l" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-" Dec 13 14:32:27.315781 env[1414]: 2024-12-13 14:32:27.193 [INFO][3972] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Namespace="calico-system" Pod="calico-kube-controllers-f9f5cc4c-fjz2l" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" Dec 13 14:32:27.315781 env[1414]: 2024-12-13 14:32:27.231 [INFO][3985] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" HandleID="k8s-pod-network.2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" Dec 13 14:32:27.315781 env[1414]: 2024-12-13 14:32:27.240 [INFO][3985] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" HandleID="k8s-pod-network.2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000318e10), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.6-a-f6adf0345d", "pod":"calico-kube-controllers-f9f5cc4c-fjz2l", "timestamp":"2024-12-13 14:32:27.231955818 +0000 UTC"}, Hostname:"ci-3510.3.6-a-f6adf0345d", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Dec 13 14:32:27.315781 env[1414]: 2024-12-13 14:32:27.240 [INFO][3985] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 14:32:27.315781 env[1414]: 2024-12-13 14:32:27.240 [INFO][3985] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 14:32:27.315781 env[1414]: 2024-12-13 14:32:27.240 [INFO][3985] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.6-a-f6adf0345d' Dec 13 14:32:27.315781 env[1414]: 2024-12-13 14:32:27.243 [INFO][3985] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.315781 env[1414]: 2024-12-13 14:32:27.246 [INFO][3985] ipam/ipam.go 372: Looking up existing affinities for host host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.315781 env[1414]: 2024-12-13 14:32:27.250 [INFO][3985] ipam/ipam.go 489: Trying affinity for 192.168.37.64/26 host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.315781 env[1414]: 2024-12-13 14:32:27.251 [INFO][3985] ipam/ipam.go 155: Attempting to load block cidr=192.168.37.64/26 host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.315781 env[1414]: 2024-12-13 14:32:27.253 [INFO][3985] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.37.64/26 host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.315781 env[1414]: 2024-12-13 14:32:27.253 [INFO][3985] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.37.64/26 handle="k8s-pod-network.2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.315781 env[1414]: 2024-12-13 14:32:27.256 [INFO][3985] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284 Dec 13 14:32:27.315781 env[1414]: 2024-12-13 14:32:27.260 [INFO][3985] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.37.64/26 handle="k8s-pod-network.2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.315781 env[1414]: 2024-12-13 14:32:27.278 [INFO][3985] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.37.67/26] block=192.168.37.64/26 handle="k8s-pod-network.2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.315781 env[1414]: 2024-12-13 14:32:27.278 [INFO][3985] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.37.67/26] handle="k8s-pod-network.2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.315781 env[1414]: 2024-12-13 14:32:27.278 [INFO][3985] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 14:32:27.315781 env[1414]: 2024-12-13 14:32:27.278 [INFO][3985] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.37.67/26] IPv6=[] ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" HandleID="k8s-pod-network.2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" Dec 13 14:32:27.316963 env[1414]: 2024-12-13 14:32:27.279 [INFO][3972] cni-plugin/k8s.go 386: Populated endpoint ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Namespace="calico-system" Pod="calico-kube-controllers-f9f5cc4c-fjz2l" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0", GenerateName:"calico-kube-controllers-f9f5cc4c-", Namespace:"calico-system", SelfLink:"", UID:"6fc9dd3b-fe61-4b81-8279-1d36298429b2", ResourceVersion:"816", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 14, 31, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"f9f5cc4c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.6-a-f6adf0345d", ContainerID:"", Pod:"calico-kube-controllers-f9f5cc4c-fjz2l", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.37.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calicb7f7d8050a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 14:32:27.316963 env[1414]: 2024-12-13 14:32:27.280 [INFO][3972] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.37.67/32] ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Namespace="calico-system" Pod="calico-kube-controllers-f9f5cc4c-fjz2l" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" Dec 13 14:32:27.316963 env[1414]: 2024-12-13 14:32:27.280 [INFO][3972] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calicb7f7d8050a ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Namespace="calico-system" Pod="calico-kube-controllers-f9f5cc4c-fjz2l" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" Dec 13 14:32:27.316963 env[1414]: 2024-12-13 14:32:27.293 [INFO][3972] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Namespace="calico-system" Pod="calico-kube-controllers-f9f5cc4c-fjz2l" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" Dec 13 14:32:27.316963 env[1414]: 2024-12-13 14:32:27.293 [INFO][3972] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Namespace="calico-system" Pod="calico-kube-controllers-f9f5cc4c-fjz2l" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0", GenerateName:"calico-kube-controllers-f9f5cc4c-", Namespace:"calico-system", SelfLink:"", UID:"6fc9dd3b-fe61-4b81-8279-1d36298429b2", ResourceVersion:"816", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 14, 31, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"f9f5cc4c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.6-a-f6adf0345d", ContainerID:"2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284", Pod:"calico-kube-controllers-f9f5cc4c-fjz2l", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.37.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calicb7f7d8050a", MAC:"4e:02:e8:72:e2:55", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 14:32:27.316963 env[1414]: 2024-12-13 14:32:27.314 [INFO][3972] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Namespace="calico-system" Pod="calico-kube-controllers-f9f5cc4c-fjz2l" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" Dec 13 14:32:27.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.317000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.317000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.317000 audit: BPF prog-id=156 op=LOAD Dec 13 14:32:27.317000 audit[4013]: AVC avc: denied { bpf } for pid=4013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.317000 audit[4013]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3998 pid=4013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.317000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866656438303933653635376462383739653165366536636561633161 Dec 13 14:32:27.317000 audit[4013]: AVC avc: denied { perfmon } for pid=4013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.317000 audit[4013]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=3998 pid=4013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.317000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866656438303933653635376462383739653165366536636561633161 Dec 13 14:32:27.317000 audit[4013]: AVC avc: denied { bpf } for pid=4013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.317000 audit[4013]: AVC avc: denied { bpf } for pid=4013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.317000 audit[4013]: AVC avc: denied { bpf } for pid=4013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.317000 audit[4013]: AVC avc: denied { perfmon } for pid=4013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.317000 audit[4013]: AVC avc: denied { perfmon } for pid=4013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.317000 audit[4013]: AVC avc: denied { perfmon } for pid=4013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.317000 audit[4013]: AVC avc: denied { perfmon } for pid=4013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.317000 audit[4013]: AVC avc: denied { perfmon } for pid=4013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.317000 audit[4013]: AVC avc: denied { bpf } for pid=4013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.317000 audit[4013]: AVC avc: denied { bpf } for pid=4013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.317000 audit: BPF prog-id=157 op=LOAD Dec 13 14:32:27.317000 audit[4013]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0001dff00 items=0 ppid=3998 pid=4013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.317000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866656438303933653635376462383739653165366536636561633161 Dec 13 14:32:27.317000 audit[4013]: AVC avc: denied { bpf } for pid=4013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.317000 audit[4013]: AVC avc: denied { bpf } for pid=4013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.317000 audit[4013]: AVC avc: denied { perfmon } for pid=4013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.317000 audit[4013]: AVC avc: denied { perfmon } for pid=4013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.317000 audit[4013]: AVC avc: denied { perfmon } for pid=4013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.317000 audit[4013]: AVC avc: denied { perfmon } for pid=4013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.317000 audit[4013]: AVC avc: denied { perfmon } for pid=4013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.317000 audit[4013]: AVC avc: denied { bpf } for pid=4013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.317000 audit[4013]: AVC avc: denied { bpf } for pid=4013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.317000 audit: BPF prog-id=158 op=LOAD Dec 13 14:32:27.317000 audit[4013]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0001dff48 items=0 ppid=3998 pid=4013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.317000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866656438303933653635376462383739653165366536636561633161 Dec 13 14:32:27.318000 audit: BPF prog-id=158 op=UNLOAD Dec 13 14:32:27.318000 audit: BPF prog-id=157 op=UNLOAD Dec 13 14:32:27.318000 audit[4013]: AVC avc: denied { bpf } for pid=4013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.318000 audit[4013]: AVC avc: denied { bpf } for pid=4013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.318000 audit[4013]: AVC avc: denied { bpf } for pid=4013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.318000 audit[4013]: AVC avc: denied { perfmon } for pid=4013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.318000 audit[4013]: AVC avc: denied { perfmon } for pid=4013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.318000 audit[4013]: AVC avc: denied { perfmon } for pid=4013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.318000 audit[4013]: AVC avc: denied { perfmon } for pid=4013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.318000 audit[4013]: AVC avc: denied { perfmon } for pid=4013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.318000 audit[4013]: AVC avc: denied { bpf } for pid=4013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.318000 audit[4013]: AVC avc: denied { bpf } for pid=4013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.318000 audit: BPF prog-id=159 op=LOAD Dec 13 14:32:27.318000 audit[4013]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c00034a358 items=0 ppid=3998 pid=4013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.318000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866656438303933653635376462383739653165366536636561633161 Dec 13 14:32:27.348002 env[1414]: time="2024-12-13T14:32:27.347944941Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-686fc44668-frvqf,Uid:50dce1b7-10b8-45fe-a58b-95a13522c319,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"8fed8093e657db879e1e6e6ceac1aece6cc0b64b157ddca361d18e14c2d2832a\"" Dec 13 14:32:27.350829 env[1414]: time="2024-12-13T14:32:27.350789646Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.29.1\"" Dec 13 14:32:27.423564 env[1414]: time="2024-12-13T14:32:27.423477286Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Dec 13 14:32:27.423713 env[1414]: time="2024-12-13T14:32:27.423513286Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Dec 13 14:32:27.423713 env[1414]: time="2024-12-13T14:32:27.423526886Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Dec 13 14:32:27.423958 env[1414]: time="2024-12-13T14:32:27.423913487Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/56f96db0c8ce71d6706d14f9ac224f77e4296def683dda756561b885e8963004 pid=4055 runtime=io.containerd.runc.v2 Dec 13 14:32:27.436809 systemd[1]: Started cri-containerd-56f96db0c8ce71d6706d14f9ac224f77e4296def683dda756561b885e8963004.scope. Dec 13 14:32:27.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.449000 audit: BPF prog-id=160 op=LOAD Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit[4065]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=4055 pid=4065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.450000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536663936646230633863653731643637303664313466396163323234 Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit[4065]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=4055 pid=4065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.450000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536663936646230633863653731643637303664313466396163323234 Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit: BPF prog-id=161 op=LOAD Dec 13 14:32:27.450000 audit[4065]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000024920 items=0 ppid=4055 pid=4065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.450000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536663936646230633863653731643637303664313466396163323234 Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit: BPF prog-id=162 op=LOAD Dec 13 14:32:27.450000 audit[4065]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000024968 items=0 ppid=4055 pid=4065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.450000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536663936646230633863653731643637303664313466396163323234 Dec 13 14:32:27.450000 audit: BPF prog-id=162 op=UNLOAD Dec 13 14:32:27.450000 audit: BPF prog-id=161 op=UNLOAD Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { perfmon } for pid=4065 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit[4065]: AVC avc: denied { bpf } for pid=4065 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.450000 audit: BPF prog-id=163 op=LOAD Dec 13 14:32:27.450000 audit[4065]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000024d78 items=0 ppid=4055 pid=4065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.450000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536663936646230633863653731643637303664313466396163323234 Dec 13 14:32:27.492164 env[1414]: time="2024-12-13T14:32:27.492079518Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Dec 13 14:32:27.492393 env[1414]: time="2024-12-13T14:32:27.492362918Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Dec 13 14:32:27.492573 env[1414]: time="2024-12-13T14:32:27.492529519Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Dec 13 14:32:27.492937 env[1414]: time="2024-12-13T14:32:27.492888819Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284 pid=4087 runtime=io.containerd.runc.v2 Dec 13 14:32:27.509194 env[1414]: time="2024-12-13T14:32:27.509144350Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-6f6b679f8f-9pcc2,Uid:ab01c38b-ace9-49a5-9e1f-886c614236ba,Namespace:kube-system,Attempt:1,} returns sandbox id \"56f96db0c8ce71d6706d14f9ac224f77e4296def683dda756561b885e8963004\"" Dec 13 14:32:27.521423 env[1414]: time="2024-12-13T14:32:27.521282074Z" level=info msg="CreateContainer within sandbox \"56f96db0c8ce71d6706d14f9ac224f77e4296def683dda756561b885e8963004\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Dec 13 14:32:27.540704 systemd[1]: run-containerd-runc-k8s.io-2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284-runc.qcwW0o.mount: Deactivated successfully. Dec 13 14:32:27.551000 audit[4123]: NETFILTER_CFG table=mangle:101 family=2 entries=16 op=nft_register_chain pid=4123 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Dec 13 14:32:27.551000 audit[4123]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffe4ca3dd50 a2=0 a3=7ffe4ca3dd3c items=0 ppid=3704 pid=4123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.551000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Dec 13 14:32:27.561690 systemd[1]: Started cri-containerd-2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284.scope. Dec 13 14:32:27.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit: BPF prog-id=164 op=LOAD Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit[4103]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4087 pid=4103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264333635626136323938633865366533383263613035313732303666 Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit[4103]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4087 pid=4103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264333635626136323938633865366533383263613035313732303666 Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit: BPF prog-id=165 op=LOAD Dec 13 14:32:27.575000 audit[4103]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00031a840 items=0 ppid=4087 pid=4103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264333635626136323938633865366533383263613035313732303666 Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit: BPF prog-id=166 op=LOAD Dec 13 14:32:27.575000 audit[4103]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00031a888 items=0 ppid=4087 pid=4103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264333635626136323938633865366533383263613035313732303666 Dec 13 14:32:27.575000 audit: BPF prog-id=166 op=UNLOAD Dec 13 14:32:27.575000 audit: BPF prog-id=165 op=UNLOAD Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:27.575000 audit: BPF prog-id=167 op=LOAD Dec 13 14:32:27.575000 audit[4103]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00031ac98 items=0 ppid=4087 pid=4103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264333635626136323938633865366533383263613035313732303666 Dec 13 14:32:27.607225 env[1414]: time="2024-12-13T14:32:27.607174739Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-f9f5cc4c-fjz2l,Uid:6fc9dd3b-fe61-4b81-8279-1d36298429b2,Namespace:calico-system,Attempt:1,} returns sandbox id \"2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284\"" Dec 13 14:32:27.670000 audit[4122]: NETFILTER_CFG table=nat:102 family=2 entries=15 op=nft_register_chain pid=4122 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Dec 13 14:32:27.670000 audit[4122]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7fff1a4b7140 a2=0 a3=7fff1a4b712c items=0 ppid=3704 pid=4122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.670000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Dec 13 14:32:27.680000 audit[4136]: NETFILTER_CFG table=filter:103 family=2 entries=39 op=nft_register_chain pid=4136 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Dec 13 14:32:27.680000 audit[4136]: SYSCALL arch=c000003e syscall=46 success=yes exit=18968 a0=3 a1=7ffc1dc23ea0 a2=0 a3=7ffc1dc23e8c items=0 ppid=3704 pid=4136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.680000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Dec 13 14:32:27.749000 audit[4121]: NETFILTER_CFG table=raw:104 family=2 entries=21 op=nft_register_chain pid=4121 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Dec 13 14:32:27.749000 audit[4121]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7fff02367f70 a2=0 a3=7fff02367f5c items=0 ppid=3704 pid=4121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.749000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Dec 13 14:32:27.777580 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Dec 13 14:32:27.777390 systemd-networkd[1577]: calidf8ba8ffb00: Link UP Dec 13 14:32:27.786606 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calidf8ba8ffb00: link becomes ready Dec 13 14:32:27.786515 systemd-networkd[1577]: calidf8ba8ffb00: Gained carrier Dec 13 14:32:27.800622 env[1414]: 2024-12-13 14:32:27.702 [INFO][4145] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--wmp2w-eth0 calico-apiserver-686fc44668- calico-apiserver a16f2d4c-353e-4324-a00d-1da60b685d6a 823 0 2024-12-13 14:31:48 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:686fc44668 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.6-a-f6adf0345d calico-apiserver-686fc44668-wmp2w eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calidf8ba8ffb00 [] []}} ContainerID="f4d75e82bab4aeb96bf41c872be36337eeb0ed811b81c269d1e80e6bcef79171" Namespace="calico-apiserver" Pod="calico-apiserver-686fc44668-wmp2w" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--wmp2w-" Dec 13 14:32:27.800622 env[1414]: 2024-12-13 14:32:27.702 [INFO][4145] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="f4d75e82bab4aeb96bf41c872be36337eeb0ed811b81c269d1e80e6bcef79171" Namespace="calico-apiserver" Pod="calico-apiserver-686fc44668-wmp2w" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--wmp2w-eth0" Dec 13 14:32:27.800622 env[1414]: 2024-12-13 14:32:27.728 [INFO][4160] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f4d75e82bab4aeb96bf41c872be36337eeb0ed811b81c269d1e80e6bcef79171" HandleID="k8s-pod-network.f4d75e82bab4aeb96bf41c872be36337eeb0ed811b81c269d1e80e6bcef79171" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--wmp2w-eth0" Dec 13 14:32:27.800622 env[1414]: 2024-12-13 14:32:27.737 [INFO][4160] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="f4d75e82bab4aeb96bf41c872be36337eeb0ed811b81c269d1e80e6bcef79171" HandleID="k8s-pod-network.f4d75e82bab4aeb96bf41c872be36337eeb0ed811b81c269d1e80e6bcef79171" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--wmp2w-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000318af0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.6-a-f6adf0345d", "pod":"calico-apiserver-686fc44668-wmp2w", "timestamp":"2024-12-13 14:32:27.728660272 +0000 UTC"}, Hostname:"ci-3510.3.6-a-f6adf0345d", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Dec 13 14:32:27.800622 env[1414]: 2024-12-13 14:32:27.737 [INFO][4160] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 14:32:27.800622 env[1414]: 2024-12-13 14:32:27.737 [INFO][4160] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 14:32:27.800622 env[1414]: 2024-12-13 14:32:27.737 [INFO][4160] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.6-a-f6adf0345d' Dec 13 14:32:27.800622 env[1414]: 2024-12-13 14:32:27.739 [INFO][4160] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.f4d75e82bab4aeb96bf41c872be36337eeb0ed811b81c269d1e80e6bcef79171" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.800622 env[1414]: 2024-12-13 14:32:27.742 [INFO][4160] ipam/ipam.go 372: Looking up existing affinities for host host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.800622 env[1414]: 2024-12-13 14:32:27.745 [INFO][4160] ipam/ipam.go 489: Trying affinity for 192.168.37.64/26 host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.800622 env[1414]: 2024-12-13 14:32:27.747 [INFO][4160] ipam/ipam.go 155: Attempting to load block cidr=192.168.37.64/26 host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.800622 env[1414]: 2024-12-13 14:32:27.750 [INFO][4160] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.37.64/26 host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.800622 env[1414]: 2024-12-13 14:32:27.750 [INFO][4160] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.37.64/26 handle="k8s-pod-network.f4d75e82bab4aeb96bf41c872be36337eeb0ed811b81c269d1e80e6bcef79171" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.800622 env[1414]: 2024-12-13 14:32:27.751 [INFO][4160] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.f4d75e82bab4aeb96bf41c872be36337eeb0ed811b81c269d1e80e6bcef79171 Dec 13 14:32:27.800622 env[1414]: 2024-12-13 14:32:27.756 [INFO][4160] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.37.64/26 handle="k8s-pod-network.f4d75e82bab4aeb96bf41c872be36337eeb0ed811b81c269d1e80e6bcef79171" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.800622 env[1414]: 2024-12-13 14:32:27.766 [INFO][4160] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.37.68/26] block=192.168.37.64/26 handle="k8s-pod-network.f4d75e82bab4aeb96bf41c872be36337eeb0ed811b81c269d1e80e6bcef79171" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.800622 env[1414]: 2024-12-13 14:32:27.766 [INFO][4160] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.37.68/26] handle="k8s-pod-network.f4d75e82bab4aeb96bf41c872be36337eeb0ed811b81c269d1e80e6bcef79171" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.800622 env[1414]: 2024-12-13 14:32:27.767 [INFO][4160] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 14:32:27.800622 env[1414]: 2024-12-13 14:32:27.767 [INFO][4160] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.37.68/26] IPv6=[] ContainerID="f4d75e82bab4aeb96bf41c872be36337eeb0ed811b81c269d1e80e6bcef79171" HandleID="k8s-pod-network.f4d75e82bab4aeb96bf41c872be36337eeb0ed811b81c269d1e80e6bcef79171" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--wmp2w-eth0" Dec 13 14:32:27.801811 env[1414]: 2024-12-13 14:32:27.768 [INFO][4145] cni-plugin/k8s.go 386: Populated endpoint ContainerID="f4d75e82bab4aeb96bf41c872be36337eeb0ed811b81c269d1e80e6bcef79171" Namespace="calico-apiserver" Pod="calico-apiserver-686fc44668-wmp2w" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--wmp2w-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--wmp2w-eth0", GenerateName:"calico-apiserver-686fc44668-", Namespace:"calico-apiserver", SelfLink:"", UID:"a16f2d4c-353e-4324-a00d-1da60b685d6a", ResourceVersion:"823", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 14, 31, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"686fc44668", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.6-a-f6adf0345d", ContainerID:"", Pod:"calico-apiserver-686fc44668-wmp2w", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.37.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidf8ba8ffb00", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 14:32:27.801811 env[1414]: 2024-12-13 14:32:27.769 [INFO][4145] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.37.68/32] ContainerID="f4d75e82bab4aeb96bf41c872be36337eeb0ed811b81c269d1e80e6bcef79171" Namespace="calico-apiserver" Pod="calico-apiserver-686fc44668-wmp2w" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--wmp2w-eth0" Dec 13 14:32:27.801811 env[1414]: 2024-12-13 14:32:27.769 [INFO][4145] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calidf8ba8ffb00 ContainerID="f4d75e82bab4aeb96bf41c872be36337eeb0ed811b81c269d1e80e6bcef79171" Namespace="calico-apiserver" Pod="calico-apiserver-686fc44668-wmp2w" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--wmp2w-eth0" Dec 13 14:32:27.801811 env[1414]: 2024-12-13 14:32:27.784 [INFO][4145] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="f4d75e82bab4aeb96bf41c872be36337eeb0ed811b81c269d1e80e6bcef79171" Namespace="calico-apiserver" Pod="calico-apiserver-686fc44668-wmp2w" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--wmp2w-eth0" Dec 13 14:32:27.801811 env[1414]: 2024-12-13 14:32:27.784 [INFO][4145] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="f4d75e82bab4aeb96bf41c872be36337eeb0ed811b81c269d1e80e6bcef79171" Namespace="calico-apiserver" Pod="calico-apiserver-686fc44668-wmp2w" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--wmp2w-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--wmp2w-eth0", GenerateName:"calico-apiserver-686fc44668-", Namespace:"calico-apiserver", SelfLink:"", UID:"a16f2d4c-353e-4324-a00d-1da60b685d6a", ResourceVersion:"823", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 14, 31, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"686fc44668", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.6-a-f6adf0345d", ContainerID:"f4d75e82bab4aeb96bf41c872be36337eeb0ed811b81c269d1e80e6bcef79171", Pod:"calico-apiserver-686fc44668-wmp2w", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.37.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidf8ba8ffb00", MAC:"8a:c6:9a:9d:3c:1b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 14:32:27.801811 env[1414]: 2024-12-13 14:32:27.797 [INFO][4145] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="f4d75e82bab4aeb96bf41c872be36337eeb0ed811b81c269d1e80e6bcef79171" Namespace="calico-apiserver" Pod="calico-apiserver-686fc44668-wmp2w" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--wmp2w-eth0" Dec 13 14:32:27.811000 audit[4175]: NETFILTER_CFG table=filter:105 family=2 entries=100 op=nft_register_chain pid=4175 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Dec 13 14:32:27.811000 audit[4175]: SYSCALL arch=c000003e syscall=46 success=yes exit=58364 a0=3 a1=7ffe7856bae0 a2=0 a3=7ffe7856bacc items=0 ppid=3704 pid=4175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.811000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Dec 13 14:32:27.826000 audit[4182]: NETFILTER_CFG table=filter:106 family=2 entries=42 op=nft_register_chain pid=4182 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Dec 13 14:32:27.826000 audit[4182]: SYSCALL arch=c000003e syscall=46 success=yes exit=22704 a0=3 a1=7ffceb7bc250 a2=0 a3=7ffceb7bc23c items=0 ppid=3704 pid=4182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.826000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Dec 13 14:32:27.955350 systemd-networkd[1577]: cali9b7cbc33af7: Link UP Dec 13 14:32:27.962588 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali9b7cbc33af7: link becomes ready Dec 13 14:32:27.962473 systemd-networkd[1577]: cali9b7cbc33af7: Gained carrier Dec 13 14:32:27.979067 env[1414]: 2024-12-13 14:32:27.887 [INFO][4183] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.6--a--f6adf0345d-k8s-csi--node--driver--5fclm-eth0 csi-node-driver- calico-system 97d535fd-6d62-48fb-8a31-b56e5e376a53 824 0 2024-12-13 14:31:47 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:56747c9949 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ci-3510.3.6-a-f6adf0345d csi-node-driver-5fclm eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali9b7cbc33af7 [] []}} ContainerID="af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e" Namespace="calico-system" Pod="csi-node-driver-5fclm" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-csi--node--driver--5fclm-" Dec 13 14:32:27.979067 env[1414]: 2024-12-13 14:32:27.887 [INFO][4183] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e" Namespace="calico-system" Pod="csi-node-driver-5fclm" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-csi--node--driver--5fclm-eth0" Dec 13 14:32:27.979067 env[1414]: 2024-12-13 14:32:27.912 [INFO][4197] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e" HandleID="k8s-pod-network.af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e" Workload="ci--3510.3.6--a--f6adf0345d-k8s-csi--node--driver--5fclm-eth0" Dec 13 14:32:27.979067 env[1414]: 2024-12-13 14:32:27.922 [INFO][4197] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e" HandleID="k8s-pod-network.af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e" Workload="ci--3510.3.6--a--f6adf0345d-k8s-csi--node--driver--5fclm-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000319930), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.6-a-f6adf0345d", "pod":"csi-node-driver-5fclm", "timestamp":"2024-12-13 14:32:27.912929026 +0000 UTC"}, Hostname:"ci-3510.3.6-a-f6adf0345d", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Dec 13 14:32:27.979067 env[1414]: 2024-12-13 14:32:27.922 [INFO][4197] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 14:32:27.979067 env[1414]: 2024-12-13 14:32:27.922 [INFO][4197] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 14:32:27.979067 env[1414]: 2024-12-13 14:32:27.922 [INFO][4197] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.6-a-f6adf0345d' Dec 13 14:32:27.979067 env[1414]: 2024-12-13 14:32:27.924 [INFO][4197] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.979067 env[1414]: 2024-12-13 14:32:27.926 [INFO][4197] ipam/ipam.go 372: Looking up existing affinities for host host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.979067 env[1414]: 2024-12-13 14:32:27.930 [INFO][4197] ipam/ipam.go 489: Trying affinity for 192.168.37.64/26 host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.979067 env[1414]: 2024-12-13 14:32:27.931 [INFO][4197] ipam/ipam.go 155: Attempting to load block cidr=192.168.37.64/26 host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.979067 env[1414]: 2024-12-13 14:32:27.933 [INFO][4197] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.37.64/26 host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.979067 env[1414]: 2024-12-13 14:32:27.933 [INFO][4197] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.37.64/26 handle="k8s-pod-network.af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.979067 env[1414]: 2024-12-13 14:32:27.934 [INFO][4197] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e Dec 13 14:32:27.979067 env[1414]: 2024-12-13 14:32:27.943 [INFO][4197] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.37.64/26 handle="k8s-pod-network.af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.979067 env[1414]: 2024-12-13 14:32:27.950 [INFO][4197] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.37.69/26] block=192.168.37.64/26 handle="k8s-pod-network.af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.979067 env[1414]: 2024-12-13 14:32:27.950 [INFO][4197] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.37.69/26] handle="k8s-pod-network.af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:27.979067 env[1414]: 2024-12-13 14:32:27.950 [INFO][4197] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 14:32:27.979067 env[1414]: 2024-12-13 14:32:27.951 [INFO][4197] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.37.69/26] IPv6=[] ContainerID="af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e" HandleID="k8s-pod-network.af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e" Workload="ci--3510.3.6--a--f6adf0345d-k8s-csi--node--driver--5fclm-eth0" Dec 13 14:32:27.979965 env[1414]: 2024-12-13 14:32:27.952 [INFO][4183] cni-plugin/k8s.go 386: Populated endpoint ContainerID="af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e" Namespace="calico-system" Pod="csi-node-driver-5fclm" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-csi--node--driver--5fclm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.6--a--f6adf0345d-k8s-csi--node--driver--5fclm-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"97d535fd-6d62-48fb-8a31-b56e5e376a53", ResourceVersion:"824", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 14, 31, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"56747c9949", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.6-a-f6adf0345d", ContainerID:"", Pod:"csi-node-driver-5fclm", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.37.69/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali9b7cbc33af7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 14:32:27.979965 env[1414]: 2024-12-13 14:32:27.952 [INFO][4183] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.37.69/32] ContainerID="af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e" Namespace="calico-system" Pod="csi-node-driver-5fclm" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-csi--node--driver--5fclm-eth0" Dec 13 14:32:27.979965 env[1414]: 2024-12-13 14:32:27.952 [INFO][4183] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali9b7cbc33af7 ContainerID="af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e" Namespace="calico-system" Pod="csi-node-driver-5fclm" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-csi--node--driver--5fclm-eth0" Dec 13 14:32:27.979965 env[1414]: 2024-12-13 14:32:27.963 [INFO][4183] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e" Namespace="calico-system" Pod="csi-node-driver-5fclm" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-csi--node--driver--5fclm-eth0" Dec 13 14:32:27.979965 env[1414]: 2024-12-13 14:32:27.963 [INFO][4183] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e" Namespace="calico-system" Pod="csi-node-driver-5fclm" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-csi--node--driver--5fclm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.6--a--f6adf0345d-k8s-csi--node--driver--5fclm-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"97d535fd-6d62-48fb-8a31-b56e5e376a53", ResourceVersion:"824", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 14, 31, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"56747c9949", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.6-a-f6adf0345d", ContainerID:"af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e", Pod:"csi-node-driver-5fclm", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.37.69/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali9b7cbc33af7", MAC:"8a:46:52:53:f6:4c", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 14:32:27.979965 env[1414]: 2024-12-13 14:32:27.977 [INFO][4183] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e" Namespace="calico-system" Pod="csi-node-driver-5fclm" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-csi--node--driver--5fclm-eth0" Dec 13 14:32:27.992000 audit[4216]: NETFILTER_CFG table=filter:107 family=2 entries=46 op=nft_register_chain pid=4216 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Dec 13 14:32:27.992000 audit[4216]: SYSCALL arch=c000003e syscall=46 success=yes exit=22204 a0=3 a1=7fffc7abbec0 a2=0 a3=7fffc7abbeac items=0 ppid=3704 pid=4216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:27.992000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Dec 13 14:32:28.016173 env[1414]: time="2024-12-13T14:32:28.016093024Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Dec 13 14:32:28.016173 env[1414]: time="2024-12-13T14:32:28.016137024Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Dec 13 14:32:28.016173 env[1414]: time="2024-12-13T14:32:28.016150924Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Dec 13 14:32:28.017332 env[1414]: time="2024-12-13T14:32:28.016535625Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f4d75e82bab4aeb96bf41c872be36337eeb0ed811b81c269d1e80e6bcef79171 pid=4224 runtime=io.containerd.runc.v2 Dec 13 14:32:28.030330 systemd[1]: Started cri-containerd-f4d75e82bab4aeb96bf41c872be36337eeb0ed811b81c269d1e80e6bcef79171.scope. Dec 13 14:32:28.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.046000 audit: BPF prog-id=168 op=LOAD Dec 13 14:32:28.046000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.046000 audit[4234]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=4224 pid=4234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:28.046000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634643735653832626162346165623936626634316338373262653336 Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit[4234]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=4224 pid=4234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:28.047000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634643735653832626162346165623936626634316338373262653336 Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit: BPF prog-id=169 op=LOAD Dec 13 14:32:28.047000 audit[4234]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0003d07b0 items=0 ppid=4224 pid=4234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:28.047000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634643735653832626162346165623936626634316338373262653336 Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit: BPF prog-id=170 op=LOAD Dec 13 14:32:28.047000 audit[4234]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0003d07f8 items=0 ppid=4224 pid=4234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:28.047000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634643735653832626162346165623936626634316338373262653336 Dec 13 14:32:28.047000 audit: BPF prog-id=170 op=UNLOAD Dec 13 14:32:28.047000 audit: BPF prog-id=169 op=UNLOAD Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.047000 audit: BPF prog-id=171 op=LOAD Dec 13 14:32:28.047000 audit[4234]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0003d0c08 items=0 ppid=4224 pid=4234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:28.047000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634643735653832626162346165623936626634316338373262653336 Dec 13 14:32:28.107285 env[1414]: time="2024-12-13T14:32:28.077804442Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-686fc44668-wmp2w,Uid:a16f2d4c-353e-4324-a00d-1da60b685d6a,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"f4d75e82bab4aeb96bf41c872be36337eeb0ed811b81c269d1e80e6bcef79171\"" Dec 13 14:32:28.210839 env[1414]: time="2024-12-13T14:32:28.210764496Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Dec 13 14:32:28.210839 env[1414]: time="2024-12-13T14:32:28.210800696Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Dec 13 14:32:28.211084 env[1414]: time="2024-12-13T14:32:28.211039996Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Dec 13 14:32:28.211304 env[1414]: time="2024-12-13T14:32:28.211241297Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e pid=4264 runtime=io.containerd.runc.v2 Dec 13 14:32:28.223659 systemd[1]: Started cri-containerd-af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e.scope. Dec 13 14:32:28.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit: BPF prog-id=172 op=LOAD Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit[4275]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000149c48 a2=10 a3=1c items=0 ppid=4264 pid=4275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:28.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166323537646336326432383062396536373965336364636662356531 Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit[4275]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001496b0 a2=3c a3=c items=0 ppid=4264 pid=4275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:28.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166323537646336326432383062396536373965336364636662356531 Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit: BPF prog-id=173 op=LOAD Dec 13 14:32:28.236000 audit[4275]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001499d8 a2=78 a3=c000212350 items=0 ppid=4264 pid=4275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:28.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166323537646336326432383062396536373965336364636662356531 Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit: BPF prog-id=174 op=LOAD Dec 13 14:32:28.236000 audit[4275]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000149770 a2=78 a3=c000212398 items=0 ppid=4264 pid=4275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:28.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166323537646336326432383062396536373965336364636662356531 Dec 13 14:32:28.236000 audit: BPF prog-id=174 op=UNLOAD Dec 13 14:32:28.236000 audit: BPF prog-id=173 op=UNLOAD Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.236000 audit: BPF prog-id=175 op=LOAD Dec 13 14:32:28.236000 audit[4275]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000149c30 a2=78 a3=c0002127a8 items=0 ppid=4264 pid=4275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:28.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166323537646336326432383062396536373965336364636662356531 Dec 13 14:32:28.249799 env[1414]: time="2024-12-13T14:32:28.249649570Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-5fclm,Uid:97d535fd-6d62-48fb-8a31-b56e5e376a53,Namespace:calico-system,Attempt:1,} returns sandbox id \"af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e\"" Dec 13 14:32:28.285083 env[1414]: time="2024-12-13T14:32:28.284083436Z" level=info msg="StopPodSandbox for \"2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38\"" Dec 13 14:32:28.364376 env[1414]: 2024-12-13 14:32:28.332 [INFO][4313] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" Dec 13 14:32:28.364376 env[1414]: 2024-12-13 14:32:28.333 [INFO][4313] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" iface="eth0" netns="/var/run/netns/cni-0dc56155-03d4-7d39-1169-947c34c211a9" Dec 13 14:32:28.364376 env[1414]: 2024-12-13 14:32:28.333 [INFO][4313] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" iface="eth0" netns="/var/run/netns/cni-0dc56155-03d4-7d39-1169-947c34c211a9" Dec 13 14:32:28.364376 env[1414]: 2024-12-13 14:32:28.333 [INFO][4313] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" iface="eth0" netns="/var/run/netns/cni-0dc56155-03d4-7d39-1169-947c34c211a9" Dec 13 14:32:28.364376 env[1414]: 2024-12-13 14:32:28.333 [INFO][4313] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" Dec 13 14:32:28.364376 env[1414]: 2024-12-13 14:32:28.333 [INFO][4313] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" Dec 13 14:32:28.364376 env[1414]: 2024-12-13 14:32:28.353 [INFO][4320] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" HandleID="k8s-pod-network.2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" Workload="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--6dpql-eth0" Dec 13 14:32:28.364376 env[1414]: 2024-12-13 14:32:28.353 [INFO][4320] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 14:32:28.364376 env[1414]: 2024-12-13 14:32:28.353 [INFO][4320] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 14:32:28.364376 env[1414]: 2024-12-13 14:32:28.359 [WARNING][4320] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" HandleID="k8s-pod-network.2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" Workload="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--6dpql-eth0" Dec 13 14:32:28.364376 env[1414]: 2024-12-13 14:32:28.359 [INFO][4320] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" HandleID="k8s-pod-network.2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" Workload="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--6dpql-eth0" Dec 13 14:32:28.364376 env[1414]: 2024-12-13 14:32:28.361 [INFO][4320] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 14:32:28.364376 env[1414]: 2024-12-13 14:32:28.362 [INFO][4313] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" Dec 13 14:32:28.365775 env[1414]: time="2024-12-13T14:32:28.365718992Z" level=info msg="TearDown network for sandbox \"2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38\" successfully" Dec 13 14:32:28.365933 env[1414]: time="2024-12-13T14:32:28.365910592Z" level=info msg="StopPodSandbox for \"2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38\" returns successfully" Dec 13 14:32:28.366778 env[1414]: time="2024-12-13T14:32:28.366742794Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-6f6b679f8f-6dpql,Uid:a502a44e-8475-402c-b0b4-09e660487f43,Namespace:kube-system,Attempt:1,}" Dec 13 14:32:28.425828 systemd-networkd[1577]: calicb7f7d8050a: Gained IPv6LL Dec 13 14:32:28.456461 env[1414]: time="2024-12-13T14:32:28.456412465Z" level=info msg="CreateContainer within sandbox \"56f96db0c8ce71d6706d14f9ac224f77e4296def683dda756561b885e8963004\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"bda012be7036e98096613f44cdb1895cd09c787016bcc316aa11ea3bc5891b60\"" Dec 13 14:32:28.457877 env[1414]: time="2024-12-13T14:32:28.457796767Z" level=info msg="StartContainer for \"bda012be7036e98096613f44cdb1895cd09c787016bcc316aa11ea3bc5891b60\"" Dec 13 14:32:28.477349 systemd[1]: run-netns-cni\x2d0dc56155\x2d03d4\x2d7d39\x2d1169\x2d947c34c211a9.mount: Deactivated successfully. Dec 13 14:32:28.495652 systemd[1]: run-containerd-runc-k8s.io-bda012be7036e98096613f44cdb1895cd09c787016bcc316aa11ea3bc5891b60-runc.HwCJfD.mount: Deactivated successfully. Dec 13 14:32:28.500989 systemd[1]: Started cri-containerd-bda012be7036e98096613f44cdb1895cd09c787016bcc316aa11ea3bc5891b60.scope. Dec 13 14:32:28.518972 kernel: kauditd_printk_skb: 866 callbacks suppressed Dec 13 14:32:28.519062 kernel: audit: type=1400 audit(1734100348.513:1217): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.564810 kernel: audit: type=1400 audit(1734100348.513:1218): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.564976 kernel: audit: type=1400 audit(1734100348.513:1219): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.567178 systemd-networkd[1577]: vxlan.calico: Gained IPv6LL Dec 13 14:32:28.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.586568 kernel: audit: type=1400 audit(1734100348.513:1220): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.615044 kernel: audit: type=1400 audit(1734100348.513:1221): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.615213 kernel: audit: type=1400 audit(1734100348.513:1222): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.616910 env[1414]: time="2024-12-13T14:32:28.616844571Z" level=info msg="StartContainer for \"bda012be7036e98096613f44cdb1895cd09c787016bcc316aa11ea3bc5891b60\" returns successfully" Dec 13 14:32:28.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.632619 kernel: audit: type=1400 audit(1734100348.513:1223): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.632784 kernel: audit: type=1400 audit(1734100348.513:1224): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.657728 kernel: audit: type=1400 audit(1734100348.513:1225): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.658581 kernel: audit: type=1400 audit(1734100348.518:1226): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.518000 audit: BPF prog-id=176 op=LOAD Dec 13 14:32:28.533000 audit[4334]: AVC avc: denied { bpf } for pid=4334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.533000 audit[4334]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4055 pid=4334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:28.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264613031326265373033366539383039363631336634346364623138 Dec 13 14:32:28.533000 audit[4334]: AVC avc: denied { perfmon } for pid=4334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.533000 audit[4334]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4055 pid=4334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:28.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264613031326265373033366539383039363631336634346364623138 Dec 13 14:32:28.533000 audit[4334]: AVC avc: denied { bpf } for pid=4334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.533000 audit[4334]: AVC avc: denied { bpf } for pid=4334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.533000 audit[4334]: AVC avc: denied { bpf } for pid=4334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.533000 audit[4334]: AVC avc: denied { perfmon } for pid=4334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.533000 audit[4334]: AVC avc: denied { perfmon } for pid=4334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.533000 audit[4334]: AVC avc: denied { perfmon } for pid=4334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.533000 audit[4334]: AVC avc: denied { perfmon } for pid=4334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.533000 audit[4334]: AVC avc: denied { perfmon } for pid=4334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.533000 audit[4334]: AVC avc: denied { bpf } for pid=4334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.533000 audit[4334]: AVC avc: denied { bpf } for pid=4334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.533000 audit: BPF prog-id=177 op=LOAD Dec 13 14:32:28.533000 audit[4334]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00031d650 items=0 ppid=4055 pid=4334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:28.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264613031326265373033366539383039363631336634346364623138 Dec 13 14:32:28.534000 audit[4334]: AVC avc: denied { bpf } for pid=4334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.534000 audit[4334]: AVC avc: denied { bpf } for pid=4334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.534000 audit[4334]: AVC avc: denied { perfmon } for pid=4334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.534000 audit[4334]: AVC avc: denied { perfmon } for pid=4334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.534000 audit[4334]: AVC avc: denied { perfmon } for pid=4334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.534000 audit[4334]: AVC avc: denied { perfmon } for pid=4334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.534000 audit[4334]: AVC avc: denied { perfmon } for pid=4334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.534000 audit[4334]: AVC avc: denied { bpf } for pid=4334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.534000 audit[4334]: AVC avc: denied { bpf } for pid=4334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.534000 audit: BPF prog-id=178 op=LOAD Dec 13 14:32:28.534000 audit[4334]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00031d698 items=0 ppid=4055 pid=4334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:28.534000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264613031326265373033366539383039363631336634346364623138 Dec 13 14:32:28.534000 audit: BPF prog-id=178 op=UNLOAD Dec 13 14:32:28.534000 audit: BPF prog-id=177 op=UNLOAD Dec 13 14:32:28.534000 audit[4334]: AVC avc: denied { bpf } for pid=4334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.534000 audit[4334]: AVC avc: denied { bpf } for pid=4334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.534000 audit[4334]: AVC avc: denied { bpf } for pid=4334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.534000 audit[4334]: AVC avc: denied { perfmon } for pid=4334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.534000 audit[4334]: AVC avc: denied { perfmon } for pid=4334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.534000 audit[4334]: AVC avc: denied { perfmon } for pid=4334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.534000 audit[4334]: AVC avc: denied { perfmon } for pid=4334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.534000 audit[4334]: AVC avc: denied { perfmon } for pid=4334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.534000 audit[4334]: AVC avc: denied { bpf } for pid=4334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.534000 audit[4334]: AVC avc: denied { bpf } for pid=4334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.534000 audit: BPF prog-id=179 op=LOAD Dec 13 14:32:28.534000 audit[4334]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00031daa8 items=0 ppid=4055 pid=4334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:28.534000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264613031326265373033366539383039363631336634346364623138 Dec 13 14:32:28.747211 systemd-networkd[1577]: cali2132811616a: Gained IPv6LL Dec 13 14:32:28.821369 systemd-networkd[1577]: cali7862d805644: Link UP Dec 13 14:32:28.832172 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Dec 13 14:32:28.832315 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7862d805644: link becomes ready Dec 13 14:32:28.832731 systemd-networkd[1577]: cali7862d805644: Gained carrier Dec 13 14:32:28.851450 env[1414]: 2024-12-13 14:32:28.737 [INFO][4366] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--6dpql-eth0 coredns-6f6b679f8f- kube-system a502a44e-8475-402c-b0b4-09e660487f43 849 0 2024-12-13 14:31:33 +0000 UTC map[k8s-app:kube-dns pod-template-hash:6f6b679f8f projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.6-a-f6adf0345d coredns-6f6b679f8f-6dpql eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali7862d805644 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="7256cab8e74df9d9aac07a099461f11f315d80728a8cdd424da9ae01e67b9a4b" Namespace="kube-system" Pod="coredns-6f6b679f8f-6dpql" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--6dpql-" Dec 13 14:32:28.851450 env[1414]: 2024-12-13 14:32:28.738 [INFO][4366] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="7256cab8e74df9d9aac07a099461f11f315d80728a8cdd424da9ae01e67b9a4b" Namespace="kube-system" Pod="coredns-6f6b679f8f-6dpql" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--6dpql-eth0" Dec 13 14:32:28.851450 env[1414]: 2024-12-13 14:32:28.766 [INFO][4376] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="7256cab8e74df9d9aac07a099461f11f315d80728a8cdd424da9ae01e67b9a4b" HandleID="k8s-pod-network.7256cab8e74df9d9aac07a099461f11f315d80728a8cdd424da9ae01e67b9a4b" Workload="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--6dpql-eth0" Dec 13 14:32:28.851450 env[1414]: 2024-12-13 14:32:28.781 [INFO][4376] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="7256cab8e74df9d9aac07a099461f11f315d80728a8cdd424da9ae01e67b9a4b" HandleID="k8s-pod-network.7256cab8e74df9d9aac07a099461f11f315d80728a8cdd424da9ae01e67b9a4b" Workload="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--6dpql-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000318ab0), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.6-a-f6adf0345d", "pod":"coredns-6f6b679f8f-6dpql", "timestamp":"2024-12-13 14:32:28.766971258 +0000 UTC"}, Hostname:"ci-3510.3.6-a-f6adf0345d", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Dec 13 14:32:28.851450 env[1414]: 2024-12-13 14:32:28.781 [INFO][4376] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 14:32:28.851450 env[1414]: 2024-12-13 14:32:28.781 [INFO][4376] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 14:32:28.851450 env[1414]: 2024-12-13 14:32:28.781 [INFO][4376] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.6-a-f6adf0345d' Dec 13 14:32:28.851450 env[1414]: 2024-12-13 14:32:28.783 [INFO][4376] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.7256cab8e74df9d9aac07a099461f11f315d80728a8cdd424da9ae01e67b9a4b" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:28.851450 env[1414]: 2024-12-13 14:32:28.787 [INFO][4376] ipam/ipam.go 372: Looking up existing affinities for host host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:28.851450 env[1414]: 2024-12-13 14:32:28.797 [INFO][4376] ipam/ipam.go 489: Trying affinity for 192.168.37.64/26 host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:28.851450 env[1414]: 2024-12-13 14:32:28.799 [INFO][4376] ipam/ipam.go 155: Attempting to load block cidr=192.168.37.64/26 host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:28.851450 env[1414]: 2024-12-13 14:32:28.801 [INFO][4376] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.37.64/26 host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:28.851450 env[1414]: 2024-12-13 14:32:28.801 [INFO][4376] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.37.64/26 handle="k8s-pod-network.7256cab8e74df9d9aac07a099461f11f315d80728a8cdd424da9ae01e67b9a4b" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:28.851450 env[1414]: 2024-12-13 14:32:28.802 [INFO][4376] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.7256cab8e74df9d9aac07a099461f11f315d80728a8cdd424da9ae01e67b9a4b Dec 13 14:32:28.851450 env[1414]: 2024-12-13 14:32:28.807 [INFO][4376] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.37.64/26 handle="k8s-pod-network.7256cab8e74df9d9aac07a099461f11f315d80728a8cdd424da9ae01e67b9a4b" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:28.851450 env[1414]: 2024-12-13 14:32:28.817 [INFO][4376] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.37.70/26] block=192.168.37.64/26 handle="k8s-pod-network.7256cab8e74df9d9aac07a099461f11f315d80728a8cdd424da9ae01e67b9a4b" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:28.851450 env[1414]: 2024-12-13 14:32:28.817 [INFO][4376] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.37.70/26] handle="k8s-pod-network.7256cab8e74df9d9aac07a099461f11f315d80728a8cdd424da9ae01e67b9a4b" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:32:28.851450 env[1414]: 2024-12-13 14:32:28.817 [INFO][4376] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 14:32:28.851450 env[1414]: 2024-12-13 14:32:28.817 [INFO][4376] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.37.70/26] IPv6=[] ContainerID="7256cab8e74df9d9aac07a099461f11f315d80728a8cdd424da9ae01e67b9a4b" HandleID="k8s-pod-network.7256cab8e74df9d9aac07a099461f11f315d80728a8cdd424da9ae01e67b9a4b" Workload="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--6dpql-eth0" Dec 13 14:32:28.852085 env[1414]: 2024-12-13 14:32:28.818 [INFO][4366] cni-plugin/k8s.go 386: Populated endpoint ContainerID="7256cab8e74df9d9aac07a099461f11f315d80728a8cdd424da9ae01e67b9a4b" Namespace="kube-system" Pod="coredns-6f6b679f8f-6dpql" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--6dpql-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--6dpql-eth0", GenerateName:"coredns-6f6b679f8f-", Namespace:"kube-system", SelfLink:"", UID:"a502a44e-8475-402c-b0b4-09e660487f43", ResourceVersion:"849", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 14, 31, 33, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"6f6b679f8f", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.6-a-f6adf0345d", ContainerID:"", Pod:"coredns-6f6b679f8f-6dpql", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.37.70/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7862d805644", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 14:32:28.852085 env[1414]: 2024-12-13 14:32:28.818 [INFO][4366] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.37.70/32] ContainerID="7256cab8e74df9d9aac07a099461f11f315d80728a8cdd424da9ae01e67b9a4b" Namespace="kube-system" Pod="coredns-6f6b679f8f-6dpql" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--6dpql-eth0" Dec 13 14:32:28.852085 env[1414]: 2024-12-13 14:32:28.819 [INFO][4366] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali7862d805644 ContainerID="7256cab8e74df9d9aac07a099461f11f315d80728a8cdd424da9ae01e67b9a4b" Namespace="kube-system" Pod="coredns-6f6b679f8f-6dpql" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--6dpql-eth0" Dec 13 14:32:28.852085 env[1414]: 2024-12-13 14:32:28.834 [INFO][4366] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="7256cab8e74df9d9aac07a099461f11f315d80728a8cdd424da9ae01e67b9a4b" Namespace="kube-system" Pod="coredns-6f6b679f8f-6dpql" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--6dpql-eth0" Dec 13 14:32:28.852085 env[1414]: 2024-12-13 14:32:28.835 [INFO][4366] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="7256cab8e74df9d9aac07a099461f11f315d80728a8cdd424da9ae01e67b9a4b" Namespace="kube-system" Pod="coredns-6f6b679f8f-6dpql" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--6dpql-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--6dpql-eth0", GenerateName:"coredns-6f6b679f8f-", Namespace:"kube-system", SelfLink:"", UID:"a502a44e-8475-402c-b0b4-09e660487f43", ResourceVersion:"849", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 14, 31, 33, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"6f6b679f8f", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.6-a-f6adf0345d", ContainerID:"7256cab8e74df9d9aac07a099461f11f315d80728a8cdd424da9ae01e67b9a4b", Pod:"coredns-6f6b679f8f-6dpql", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.37.70/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7862d805644", MAC:"c6:64:c2:f6:77:a7", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 14:32:28.852085 env[1414]: 2024-12-13 14:32:28.847 [INFO][4366] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="7256cab8e74df9d9aac07a099461f11f315d80728a8cdd424da9ae01e67b9a4b" Namespace="kube-system" Pod="coredns-6f6b679f8f-6dpql" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--6dpql-eth0" Dec 13 14:32:28.873000 audit[4395]: NETFILTER_CFG table=filter:108 family=2 entries=46 op=nft_register_chain pid=4395 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Dec 13 14:32:28.873000 audit[4395]: SYSCALL arch=c000003e syscall=46 success=yes exit=21784 a0=3 a1=7ffc7c78b440 a2=0 a3=7ffc7c78b42c items=0 ppid=3704 pid=4395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:28.873000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Dec 13 14:32:28.889381 env[1414]: time="2024-12-13T14:32:28.889309591Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Dec 13 14:32:28.889588 env[1414]: time="2024-12-13T14:32:28.889349991Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Dec 13 14:32:28.889588 env[1414]: time="2024-12-13T14:32:28.889365291Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Dec 13 14:32:28.889743 env[1414]: time="2024-12-13T14:32:28.889708992Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7256cab8e74df9d9aac07a099461f11f315d80728a8cdd424da9ae01e67b9a4b pid=4403 runtime=io.containerd.runc.v2 Dec 13 14:32:28.903441 systemd[1]: Started cri-containerd-7256cab8e74df9d9aac07a099461f11f315d80728a8cdd424da9ae01e67b9a4b.scope. Dec 13 14:32:28.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.919000 audit: BPF prog-id=180 op=LOAD Dec 13 14:32:28.920000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.920000 audit[4412]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4403 pid=4412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:28.920000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732353663616238653734646639643961616330376130393934363166 Dec 13 14:32:28.920000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.920000 audit[4412]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4403 pid=4412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:28.920000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732353663616238653734646639643961616330376130393934363166 Dec 13 14:32:28.920000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.920000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.920000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.920000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.920000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.920000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.920000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.920000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.920000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.920000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.920000 audit: BPF prog-id=181 op=LOAD Dec 13 14:32:28.920000 audit[4412]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000302380 items=0 ppid=4403 pid=4412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:28.920000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732353663616238653734646639643961616330376130393934363166 Dec 13 14:32:28.920000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.920000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.920000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.920000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.920000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.920000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.920000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.920000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.920000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.920000 audit: BPF prog-id=182 op=LOAD Dec 13 14:32:28.920000 audit[4412]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003023c8 items=0 ppid=4403 pid=4412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:28.920000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732353663616238653734646639643961616330376130393934363166 Dec 13 14:32:28.920000 audit: BPF prog-id=182 op=UNLOAD Dec 13 14:32:28.920000 audit: BPF prog-id=181 op=UNLOAD Dec 13 14:32:28.921000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.921000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.921000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.921000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.921000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.921000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.921000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.921000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.921000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.921000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:28.921000 audit: BPF prog-id=183 op=LOAD Dec 13 14:32:28.921000 audit[4412]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003027d8 items=0 ppid=4403 pid=4412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:28.921000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732353663616238653734646639643961616330376130393934363166 Dec 13 14:32:28.937794 systemd-networkd[1577]: cali0dcb527601a: Gained IPv6LL Dec 13 14:32:28.953340 env[1414]: time="2024-12-13T14:32:28.953279013Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-6f6b679f8f-6dpql,Uid:a502a44e-8475-402c-b0b4-09e660487f43,Namespace:kube-system,Attempt:1,} returns sandbox id \"7256cab8e74df9d9aac07a099461f11f315d80728a8cdd424da9ae01e67b9a4b\"" Dec 13 14:32:28.957692 env[1414]: time="2024-12-13T14:32:28.957651822Z" level=info msg="CreateContainer within sandbox \"7256cab8e74df9d9aac07a099461f11f315d80728a8cdd424da9ae01e67b9a4b\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Dec 13 14:32:29.023443 env[1414]: time="2024-12-13T14:32:29.023374447Z" level=info msg="CreateContainer within sandbox \"7256cab8e74df9d9aac07a099461f11f315d80728a8cdd424da9ae01e67b9a4b\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"20717fcca56db03bd6636503c31d8952a838ff24fae64dd3c525453eeb2d107a\"" Dec 13 14:32:29.024640 env[1414]: time="2024-12-13T14:32:29.024511149Z" level=info msg="StartContainer for \"20717fcca56db03bd6636503c31d8952a838ff24fae64dd3c525453eeb2d107a\"" Dec 13 14:32:29.045039 systemd[1]: Started cri-containerd-20717fcca56db03bd6636503c31d8952a838ff24fae64dd3c525453eeb2d107a.scope. Dec 13 14:32:29.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.060000 audit: BPF prog-id=184 op=LOAD Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit[4443]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4403 pid=4443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:29.061000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230373137666363613536646230336264363633363530336333316438 Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit[4443]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4403 pid=4443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:29.061000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230373137666363613536646230336264363633363530336333316438 Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit: BPF prog-id=185 op=LOAD Dec 13 14:32:29.061000 audit[4443]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000288a00 items=0 ppid=4403 pid=4443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:29.061000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230373137666363613536646230336264363633363530336333316438 Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit: BPF prog-id=186 op=LOAD Dec 13 14:32:29.061000 audit[4443]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000288a48 items=0 ppid=4403 pid=4443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:29.061000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230373137666363613536646230336264363633363530336333316438 Dec 13 14:32:29.061000 audit: BPF prog-id=186 op=UNLOAD Dec 13 14:32:29.061000 audit: BPF prog-id=185 op=UNLOAD Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:29.061000 audit: BPF prog-id=187 op=LOAD Dec 13 14:32:29.061000 audit[4443]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000288e58 items=0 ppid=4403 pid=4443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:29.061000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230373137666363613536646230336264363633363530336333316438 Dec 13 14:32:29.083150 env[1414]: time="2024-12-13T14:32:29.083056660Z" level=info msg="StartContainer for \"20717fcca56db03bd6636503c31d8952a838ff24fae64dd3c525453eeb2d107a\" returns successfully" Dec 13 14:32:29.513882 systemd-networkd[1577]: cali9b7cbc33af7: Gained IPv6LL Dec 13 14:32:29.574000 audit[4475]: NETFILTER_CFG table=filter:109 family=2 entries=16 op=nft_register_rule pid=4475 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:32:29.574000 audit[4475]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffdd0d6b4c0 a2=0 a3=7ffdd0d6b4ac items=0 ppid=2614 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:29.574000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:32:29.577738 systemd-networkd[1577]: calidf8ba8ffb00: Gained IPv6LL Dec 13 14:32:29.578778 kubelet[2458]: I1213 14:32:29.578719 2458 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-6f6b679f8f-9pcc2" podStartSLOduration=56.5786965 podStartE2EDuration="56.5786965s" podCreationTimestamp="2024-12-13 14:31:33 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-12-13 14:32:29.560072265 +0000 UTC m=+56.475059914" watchObservedRunningTime="2024-12-13 14:32:29.5786965 +0000 UTC m=+56.493684149" Dec 13 14:32:29.581000 audit[4475]: NETFILTER_CFG table=nat:110 family=2 entries=14 op=nft_register_rule pid=4475 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:32:29.581000 audit[4475]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffdd0d6b4c0 a2=0 a3=0 items=0 ppid=2614 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:29.581000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:32:29.614000 audit[4477]: NETFILTER_CFG table=filter:111 family=2 entries=13 op=nft_register_rule pid=4477 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:32:29.614000 audit[4477]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffcc4238540 a2=0 a3=7ffcc423852c items=0 ppid=2614 pid=4477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:29.614000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:32:29.619000 audit[4477]: NETFILTER_CFG table=nat:112 family=2 entries=35 op=nft_register_chain pid=4477 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:32:29.619000 audit[4477]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffcc4238540 a2=0 a3=7ffcc423852c items=0 ppid=2614 pid=4477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:29.619000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:32:30.638000 audit[4480]: NETFILTER_CFG table=filter:113 family=2 entries=10 op=nft_register_rule pid=4480 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:32:30.638000 audit[4480]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fff92cd3810 a2=0 a3=7fff92cd37fc items=0 ppid=2614 pid=4480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:30.638000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:32:30.648000 audit[4480]: NETFILTER_CFG table=nat:114 family=2 entries=56 op=nft_register_chain pid=4480 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:32:30.648000 audit[4480]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7fff92cd3810 a2=0 a3=7fff92cd37fc items=0 ppid=2614 pid=4480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:30.648000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:32:30.661599 env[1414]: time="2024-12-13T14:32:30.661497846Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:32:30.669309 env[1414]: time="2024-12-13T14:32:30.669262661Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:421726ace5ed13894f7edf594dd3a462947aedc13d0f69d08525d7369477fb70,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:32:30.674210 env[1414]: time="2024-12-13T14:32:30.674168070Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:32:30.678647 env[1414]: time="2024-12-13T14:32:30.678608979Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:b8c43e264fe52e0c327b0bf3ac882a0224b33bdd7f4ff58a74242da7d9b00486,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:32:30.679083 env[1414]: time="2024-12-13T14:32:30.679050879Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.29.1\" returns image reference \"sha256:421726ace5ed13894f7edf594dd3a462947aedc13d0f69d08525d7369477fb70\"" Dec 13 14:32:30.682197 env[1414]: time="2024-12-13T14:32:30.681313884Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.29.1\"" Dec 13 14:32:30.682952 env[1414]: time="2024-12-13T14:32:30.682910087Z" level=info msg="CreateContainer within sandbox \"8fed8093e657db879e1e6e6ceac1aece6cc0b64b157ddca361d18e14c2d2832a\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Dec 13 14:32:30.722940 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1467905934.mount: Deactivated successfully. Dec 13 14:32:30.738730 env[1414]: time="2024-12-13T14:32:30.738674892Z" level=info msg="CreateContainer within sandbox \"8fed8093e657db879e1e6e6ceac1aece6cc0b64b157ddca361d18e14c2d2832a\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"c2b7f5811f95547f0f1b20e5b929701139f41cb851243495c10e11356a8da35b\"" Dec 13 14:32:30.740725 env[1414]: time="2024-12-13T14:32:30.739593494Z" level=info msg="StartContainer for \"c2b7f5811f95547f0f1b20e5b929701139f41cb851243495c10e11356a8da35b\"" Dec 13 14:32:30.770324 systemd[1]: Started cri-containerd-c2b7f5811f95547f0f1b20e5b929701139f41cb851243495c10e11356a8da35b.scope. Dec 13 14:32:30.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit: BPF prog-id=188 op=LOAD Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit[4489]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=3998 pid=4489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:30.789000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332623766353831316639353534376630663162323065356239323937 Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit[4489]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=3998 pid=4489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:30.789000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332623766353831316639353534376630663162323065356239323937 Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit: BPF prog-id=189 op=LOAD Dec 13 14:32:30.789000 audit[4489]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0003ae490 items=0 ppid=3998 pid=4489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:30.789000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332623766353831316639353534376630663162323065356239323937 Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit: BPF prog-id=190 op=LOAD Dec 13 14:32:30.789000 audit[4489]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0003ae4d8 items=0 ppid=3998 pid=4489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:30.789000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332623766353831316639353534376630663162323065356239323937 Dec 13 14:32:30.789000 audit: BPF prog-id=190 op=UNLOAD Dec 13 14:32:30.789000 audit: BPF prog-id=189 op=UNLOAD Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:30.789000 audit: BPF prog-id=191 op=LOAD Dec 13 14:32:30.789000 audit[4489]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003ae8e8 items=0 ppid=3998 pid=4489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:30.789000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332623766353831316639353534376630663162323065356239323937 Dec 13 14:32:30.823930 env[1414]: time="2024-12-13T14:32:30.823819152Z" level=info msg="StartContainer for \"c2b7f5811f95547f0f1b20e5b929701139f41cb851243495c10e11356a8da35b\" returns successfully" Dec 13 14:32:30.857837 systemd-networkd[1577]: cali7862d805644: Gained IPv6LL Dec 13 14:32:31.584284 kubelet[2458]: I1213 14:32:31.584208 2458 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-6f6b679f8f-6dpql" podStartSLOduration=58.584166179 podStartE2EDuration="58.584166179s" podCreationTimestamp="2024-12-13 14:31:33 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-12-13 14:32:29.598961839 +0000 UTC m=+56.513949488" watchObservedRunningTime="2024-12-13 14:32:31.584166179 +0000 UTC m=+58.499153928" Dec 13 14:32:31.595000 audit[4500]: AVC avc: denied { watch } for pid=4500 comm="apiserver" path="/calico-apiserver-certs/..2024_12_13_14_32_10.2141185995/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c566,c1022 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c566,c1022 tclass=file permissive=0 Dec 13 14:32:31.595000 audit[4500]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0005b63e0 a2=fc6 a3=0 items=0 ppid=3998 pid=4500 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c566,c1022 key=(null) Dec 13 14:32:31.595000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Dec 13 14:32:31.607000 audit[4520]: NETFILTER_CFG table=filter:115 family=2 entries=10 op=nft_register_rule pid=4520 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:32:31.607000 audit[4520]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffed017c840 a2=0 a3=7ffed017c82c items=0 ppid=2614 pid=4520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:31.607000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:32:31.613000 audit[4520]: NETFILTER_CFG table=nat:116 family=2 entries=20 op=nft_register_rule pid=4520 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:32:31.613000 audit[4520]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffed017c840 a2=0 a3=7ffed017c82c items=0 ppid=2614 pid=4520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:31.613000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:32:31.624489 kubelet[2458]: I1213 14:32:31.624428 2458 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-686fc44668-frvqf" podStartSLOduration=40.293345116 podStartE2EDuration="43.624399955s" podCreationTimestamp="2024-12-13 14:31:48 +0000 UTC" firstStartedPulling="2024-12-13 14:32:27.349255943 +0000 UTC m=+54.264243592" lastFinishedPulling="2024-12-13 14:32:30.680310682 +0000 UTC m=+57.595298431" observedRunningTime="2024-12-13 14:32:31.584853481 +0000 UTC m=+58.499841230" watchObservedRunningTime="2024-12-13 14:32:31.624399955 +0000 UTC m=+58.539387604" Dec 13 14:32:31.861000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:32:31.861000 audit[2277]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0018aa000 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:32:31.861000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:32:31.862000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:32:31.862000 audit[2277]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0018aa340 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:32:31.862000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:32:31.862000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:32:31.862000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:32:31.862000 audit[2277]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0016501e0 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:32:31.862000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:32:31.862000 audit[2277]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0018aa360 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:32:31.862000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:32:32.628000 audit[4524]: NETFILTER_CFG table=filter:117 family=2 entries=9 op=nft_register_rule pid=4524 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:32:32.628000 audit[4524]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff06b66d60 a2=0 a3=7fff06b66d4c items=0 ppid=2614 pid=4524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:32.628000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:32:32.632000 audit[4524]: NETFILTER_CFG table=nat:118 family=2 entries=27 op=nft_register_chain pid=4524 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:32:32.632000 audit[4524]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7fff06b66d60 a2=0 a3=7fff06b66d4c items=0 ppid=2614 pid=4524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:32.632000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:32:32.919091 env[1414]: time="2024-12-13T14:32:32.918962071Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:32:32.930717 env[1414]: time="2024-12-13T14:32:32.929683591Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6331715a2ae96b18a770a395cac108321d108e445e08b616e5bc9fbd1f9c21da,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:32:32.935863 env[1414]: time="2024-12-13T14:32:32.935011601Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:32:32.940292 env[1414]: time="2024-12-13T14:32:32.939976810Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:1072d6a98167a14ca361e9ce757733f9bae36d1f1c6a9621ea10934b6b1e10d9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:32:32.941066 env[1414]: time="2024-12-13T14:32:32.941025112Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.29.1\" returns image reference \"sha256:6331715a2ae96b18a770a395cac108321d108e445e08b616e5bc9fbd1f9c21da\"" Dec 13 14:32:32.961637 env[1414]: time="2024-12-13T14:32:32.949968828Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.29.1\"" Dec 13 14:32:32.976248 env[1414]: time="2024-12-13T14:32:32.976200377Z" level=info msg="CreateContainer within sandbox \"2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Dec 13 14:32:33.031324 env[1414]: time="2024-12-13T14:32:33.031223879Z" level=info msg="CreateContainer within sandbox \"2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"9d6dcf4f3e38c9198571eb5c3017eec686ba0907372bdf402ff60e4184b7420f\"" Dec 13 14:32:33.032444 env[1414]: time="2024-12-13T14:32:33.032409082Z" level=info msg="StartContainer for \"9d6dcf4f3e38c9198571eb5c3017eec686ba0907372bdf402ff60e4184b7420f\"" Dec 13 14:32:33.067076 systemd[1]: Started cri-containerd-9d6dcf4f3e38c9198571eb5c3017eec686ba0907372bdf402ff60e4184b7420f.scope. Dec 13 14:32:33.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.096000 audit: BPF prog-id=192 op=LOAD Dec 13 14:32:33.096000 audit[4538]: AVC avc: denied { bpf } for pid=4538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.096000 audit[4538]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4087 pid=4538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:33.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964366463663466336533386339313938353731656235633330313765 Dec 13 14:32:33.096000 audit[4538]: AVC avc: denied { perfmon } for pid=4538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.096000 audit[4538]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4087 pid=4538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:33.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964366463663466336533386339313938353731656235633330313765 Dec 13 14:32:33.096000 audit[4538]: AVC avc: denied { bpf } for pid=4538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.096000 audit[4538]: AVC avc: denied { bpf } for pid=4538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.096000 audit[4538]: AVC avc: denied { bpf } for pid=4538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.096000 audit[4538]: AVC avc: denied { perfmon } for pid=4538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.096000 audit[4538]: AVC avc: denied { perfmon } for pid=4538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.096000 audit[4538]: AVC avc: denied { perfmon } for pid=4538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.096000 audit[4538]: AVC avc: denied { perfmon } for pid=4538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.096000 audit[4538]: AVC avc: denied { perfmon } for pid=4538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.096000 audit[4538]: AVC avc: denied { bpf } for pid=4538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.096000 audit[4538]: AVC avc: denied { bpf } for pid=4538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.096000 audit: BPF prog-id=193 op=LOAD Dec 13 14:32:33.096000 audit[4538]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002dde50 items=0 ppid=4087 pid=4538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:33.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964366463663466336533386339313938353731656235633330313765 Dec 13 14:32:33.096000 audit[4538]: AVC avc: denied { bpf } for pid=4538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.096000 audit[4538]: AVC avc: denied { bpf } for pid=4538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.096000 audit[4538]: AVC avc: denied { perfmon } for pid=4538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.096000 audit[4538]: AVC avc: denied { perfmon } for pid=4538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.096000 audit[4538]: AVC avc: denied { perfmon } for pid=4538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.096000 audit[4538]: AVC avc: denied { perfmon } for pid=4538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.096000 audit[4538]: AVC avc: denied { perfmon } for pid=4538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.096000 audit[4538]: AVC avc: denied { bpf } for pid=4538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.096000 audit[4538]: AVC avc: denied { bpf } for pid=4538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.096000 audit: BPF prog-id=194 op=LOAD Dec 13 14:32:33.096000 audit[4538]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002dde98 items=0 ppid=4087 pid=4538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:33.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964366463663466336533386339313938353731656235633330313765 Dec 13 14:32:33.097000 audit: BPF prog-id=194 op=UNLOAD Dec 13 14:32:33.097000 audit: BPF prog-id=193 op=UNLOAD Dec 13 14:32:33.097000 audit[4538]: AVC avc: denied { bpf } for pid=4538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.097000 audit[4538]: AVC avc: denied { bpf } for pid=4538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.097000 audit[4538]: AVC avc: denied { bpf } for pid=4538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.097000 audit[4538]: AVC avc: denied { perfmon } for pid=4538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.097000 audit[4538]: AVC avc: denied { perfmon } for pid=4538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.097000 audit[4538]: AVC avc: denied { perfmon } for pid=4538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.097000 audit[4538]: AVC avc: denied { perfmon } for pid=4538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.097000 audit[4538]: AVC avc: denied { perfmon } for pid=4538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.097000 audit[4538]: AVC avc: denied { bpf } for pid=4538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.097000 audit[4538]: AVC avc: denied { bpf } for pid=4538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.097000 audit: BPF prog-id=195 op=LOAD Dec 13 14:32:33.097000 audit[4538]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003462a8 items=0 ppid=4087 pid=4538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:33.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964366463663466336533386339313938353731656235633330313765 Dec 13 14:32:33.132809 env[1414]: time="2024-12-13T14:32:33.132753368Z" level=info msg="StartContainer for \"9d6dcf4f3e38c9198571eb5c3017eec686ba0907372bdf402ff60e4184b7420f\" returns successfully" Dec 13 14:32:33.258569 env[1414]: time="2024-12-13T14:32:33.258491900Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:32:33.267965 env[1414]: time="2024-12-13T14:32:33.267914418Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:421726ace5ed13894f7edf594dd3a462947aedc13d0f69d08525d7369477fb70,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:32:33.271718 env[1414]: time="2024-12-13T14:32:33.271671825Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:32:33.275122 env[1414]: time="2024-12-13T14:32:33.275086331Z" level=info msg="StopPodSandbox for \"d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf\"" Dec 13 14:32:33.277043 env[1414]: time="2024-12-13T14:32:33.277004735Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:b8c43e264fe52e0c327b0bf3ac882a0224b33bdd7f4ff58a74242da7d9b00486,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:32:33.277290 env[1414]: time="2024-12-13T14:32:33.277262735Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.29.1\" returns image reference \"sha256:421726ace5ed13894f7edf594dd3a462947aedc13d0f69d08525d7369477fb70\"" Dec 13 14:32:33.278804 env[1414]: time="2024-12-13T14:32:33.278774638Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.29.1\"" Dec 13 14:32:33.286383 env[1414]: time="2024-12-13T14:32:33.286339952Z" level=info msg="CreateContainer within sandbox \"f4d75e82bab4aeb96bf41c872be36337eeb0ed811b81c269d1e80e6bcef79171\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Dec 13 14:32:33.331500 env[1414]: time="2024-12-13T14:32:33.331422436Z" level=info msg="CreateContainer within sandbox \"f4d75e82bab4aeb96bf41c872be36337eeb0ed811b81c269d1e80e6bcef79171\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"f8553ca38c5ff85edac14a4fe42a73f5d55c9619616882f3111f50d287dfa210\"" Dec 13 14:32:33.336048 env[1414]: time="2024-12-13T14:32:33.336002544Z" level=info msg="StartContainer for \"f8553ca38c5ff85edac14a4fe42a73f5d55c9619616882f3111f50d287dfa210\"" Dec 13 14:32:33.363982 systemd[1]: Started cri-containerd-f8553ca38c5ff85edac14a4fe42a73f5d55c9619616882f3111f50d287dfa210.scope. Dec 13 14:32:33.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.393000 audit: BPF prog-id=196 op=LOAD Dec 13 14:32:33.395000 audit[4597]: AVC avc: denied { bpf } for pid=4597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.395000 audit[4597]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4224 pid=4597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:33.395000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638353533636133386335666638356564616331346134666534326137 Dec 13 14:32:33.398000 audit[4597]: AVC avc: denied { perfmon } for pid=4597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.398000 audit[4597]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4224 pid=4597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:33.398000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638353533636133386335666638356564616331346134666534326137 Dec 13 14:32:33.398000 audit[4597]: AVC avc: denied { bpf } for pid=4597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.398000 audit[4597]: AVC avc: denied { bpf } for pid=4597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.398000 audit[4597]: AVC avc: denied { bpf } for pid=4597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.398000 audit[4597]: AVC avc: denied { perfmon } for pid=4597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.398000 audit[4597]: AVC avc: denied { perfmon } for pid=4597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.398000 audit[4597]: AVC avc: denied { perfmon } for pid=4597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.398000 audit[4597]: AVC avc: denied { perfmon } for pid=4597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.398000 audit[4597]: AVC avc: denied { perfmon } for pid=4597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.398000 audit[4597]: AVC avc: denied { bpf } for pid=4597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.398000 audit[4597]: AVC avc: denied { bpf } for pid=4597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.398000 audit: BPF prog-id=197 op=LOAD Dec 13 14:32:33.398000 audit[4597]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00032fd40 items=0 ppid=4224 pid=4597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:33.398000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638353533636133386335666638356564616331346134666534326137 Dec 13 14:32:33.400000 audit[4597]: AVC avc: denied { bpf } for pid=4597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.400000 audit[4597]: AVC avc: denied { bpf } for pid=4597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.400000 audit[4597]: AVC avc: denied { perfmon } for pid=4597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.400000 audit[4597]: AVC avc: denied { perfmon } for pid=4597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.400000 audit[4597]: AVC avc: denied { perfmon } for pid=4597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.400000 audit[4597]: AVC avc: denied { perfmon } for pid=4597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.400000 audit[4597]: AVC avc: denied { perfmon } for pid=4597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.400000 audit[4597]: AVC avc: denied { bpf } for pid=4597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.400000 audit[4597]: AVC avc: denied { bpf } for pid=4597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.400000 audit: BPF prog-id=198 op=LOAD Dec 13 14:32:33.400000 audit[4597]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00032fd88 items=0 ppid=4224 pid=4597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:33.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638353533636133386335666638356564616331346134666534326137 Dec 13 14:32:33.401000 audit: BPF prog-id=198 op=UNLOAD Dec 13 14:32:33.401000 audit: BPF prog-id=197 op=UNLOAD Dec 13 14:32:33.402000 audit[4597]: AVC avc: denied { bpf } for pid=4597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.402000 audit[4597]: AVC avc: denied { bpf } for pid=4597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.402000 audit[4597]: AVC avc: denied { bpf } for pid=4597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.402000 audit[4597]: AVC avc: denied { perfmon } for pid=4597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.402000 audit[4597]: AVC avc: denied { perfmon } for pid=4597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.402000 audit[4597]: AVC avc: denied { perfmon } for pid=4597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.402000 audit[4597]: AVC avc: denied { perfmon } for pid=4597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.402000 audit[4597]: AVC avc: denied { perfmon } for pid=4597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.402000 audit[4597]: AVC avc: denied { bpf } for pid=4597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.402000 audit[4597]: AVC avc: denied { bpf } for pid=4597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:33.402000 audit: BPF prog-id=199 op=LOAD Dec 13 14:32:33.402000 audit[4597]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000396198 items=0 ppid=4224 pid=4597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:33.402000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638353533636133386335666638356564616331346134666534326137 Dec 13 14:32:33.414340 env[1414]: 2024-12-13 14:32:33.341 [WARNING][4580] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0", GenerateName:"calico-kube-controllers-f9f5cc4c-", Namespace:"calico-system", SelfLink:"", UID:"6fc9dd3b-fe61-4b81-8279-1d36298429b2", ResourceVersion:"834", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 14, 31, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"f9f5cc4c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.6-a-f6adf0345d", ContainerID:"2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284", Pod:"calico-kube-controllers-f9f5cc4c-fjz2l", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.37.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calicb7f7d8050a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 14:32:33.414340 env[1414]: 2024-12-13 14:32:33.342 [INFO][4580] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" Dec 13 14:32:33.414340 env[1414]: 2024-12-13 14:32:33.342 [INFO][4580] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" iface="eth0" netns="" Dec 13 14:32:33.414340 env[1414]: 2024-12-13 14:32:33.342 [INFO][4580] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" Dec 13 14:32:33.414340 env[1414]: 2024-12-13 14:32:33.342 [INFO][4580] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" Dec 13 14:32:33.414340 env[1414]: 2024-12-13 14:32:33.401 [INFO][4591] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" HandleID="k8s-pod-network.d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" Dec 13 14:32:33.414340 env[1414]: 2024-12-13 14:32:33.401 [INFO][4591] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 14:32:33.414340 env[1414]: 2024-12-13 14:32:33.401 [INFO][4591] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 14:32:33.414340 env[1414]: 2024-12-13 14:32:33.409 [WARNING][4591] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" HandleID="k8s-pod-network.d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" Dec 13 14:32:33.414340 env[1414]: 2024-12-13 14:32:33.409 [INFO][4591] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" HandleID="k8s-pod-network.d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" Dec 13 14:32:33.414340 env[1414]: 2024-12-13 14:32:33.411 [INFO][4591] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 14:32:33.414340 env[1414]: 2024-12-13 14:32:33.412 [INFO][4580] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" Dec 13 14:32:33.415036 env[1414]: time="2024-12-13T14:32:33.414378889Z" level=info msg="TearDown network for sandbox \"d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf\" successfully" Dec 13 14:32:33.415036 env[1414]: time="2024-12-13T14:32:33.414418789Z" level=info msg="StopPodSandbox for \"d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf\" returns successfully" Dec 13 14:32:33.415182 env[1414]: time="2024-12-13T14:32:33.415144791Z" level=info msg="RemovePodSandbox for \"d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf\"" Dec 13 14:32:33.415262 env[1414]: time="2024-12-13T14:32:33.415194991Z" level=info msg="Forcibly stopping sandbox \"d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf\"" Dec 13 14:32:33.464718 env[1414]: time="2024-12-13T14:32:33.464656082Z" level=info msg="StartContainer for \"f8553ca38c5ff85edac14a4fe42a73f5d55c9619616882f3111f50d287dfa210\" returns successfully" Dec 13 14:32:33.569501 env[1414]: 2024-12-13 14:32:33.484 [WARNING][4631] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0", GenerateName:"calico-kube-controllers-f9f5cc4c-", Namespace:"calico-system", SelfLink:"", UID:"6fc9dd3b-fe61-4b81-8279-1d36298429b2", ResourceVersion:"834", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 14, 31, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"f9f5cc4c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.6-a-f6adf0345d", ContainerID:"2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284", Pod:"calico-kube-controllers-f9f5cc4c-fjz2l", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.37.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calicb7f7d8050a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 14:32:33.569501 env[1414]: 2024-12-13 14:32:33.484 [INFO][4631] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" Dec 13 14:32:33.569501 env[1414]: 2024-12-13 14:32:33.484 [INFO][4631] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" iface="eth0" netns="" Dec 13 14:32:33.569501 env[1414]: 2024-12-13 14:32:33.484 [INFO][4631] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" Dec 13 14:32:33.569501 env[1414]: 2024-12-13 14:32:33.484 [INFO][4631] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" Dec 13 14:32:33.569501 env[1414]: 2024-12-13 14:32:33.537 [INFO][4649] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" HandleID="k8s-pod-network.d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" Dec 13 14:32:33.569501 env[1414]: 2024-12-13 14:32:33.537 [INFO][4649] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 14:32:33.569501 env[1414]: 2024-12-13 14:32:33.537 [INFO][4649] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 14:32:33.569501 env[1414]: 2024-12-13 14:32:33.555 [WARNING][4649] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" HandleID="k8s-pod-network.d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" Dec 13 14:32:33.569501 env[1414]: 2024-12-13 14:32:33.555 [INFO][4649] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" HandleID="k8s-pod-network.d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" Dec 13 14:32:33.569501 env[1414]: 2024-12-13 14:32:33.558 [INFO][4649] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 14:32:33.569501 env[1414]: 2024-12-13 14:32:33.560 [INFO][4631] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf" Dec 13 14:32:33.569501 env[1414]: time="2024-12-13T14:32:33.564063167Z" level=info msg="TearDown network for sandbox \"d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf\" successfully" Dec 13 14:32:33.615087 env[1414]: time="2024-12-13T14:32:33.615000161Z" level=info msg="RemovePodSandbox \"d240a213a01d1ea1364fc9b1557327a0cb3230f2c2199cc72a5ea2983049e6bf\" returns successfully" Dec 13 14:32:33.623250 env[1414]: time="2024-12-13T14:32:33.623206276Z" level=info msg="StopPodSandbox for \"791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686\"" Dec 13 14:32:33.652388 kubelet[2458]: I1213 14:32:33.652300 2458 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-686fc44668-wmp2w" podStartSLOduration=40.453031237 podStartE2EDuration="45.65227463s" podCreationTimestamp="2024-12-13 14:31:48 +0000 UTC" firstStartedPulling="2024-12-13 14:32:28.079236045 +0000 UTC m=+54.994223794" lastFinishedPulling="2024-12-13 14:32:33.278479438 +0000 UTC m=+60.193467187" observedRunningTime="2024-12-13 14:32:33.601301736 +0000 UTC m=+60.516289385" watchObservedRunningTime="2024-12-13 14:32:33.65227463 +0000 UTC m=+60.567262279" Dec 13 14:32:33.696607 kernel: kauditd_printk_skb: 380 callbacks suppressed Dec 13 14:32:33.696721 kernel: audit: type=1325 audit(1734100353.690:1341): table=filter:119 family=2 entries=8 op=nft_register_rule pid=4693 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:32:33.690000 audit[4693]: NETFILTER_CFG table=filter:119 family=2 entries=8 op=nft_register_rule pid=4693 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:32:33.690000 audit[4693]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff0e0c2000 a2=0 a3=7fff0e0c1fec items=0 ppid=2614 pid=4693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:33.731573 kernel: audit: type=1300 audit(1734100353.690:1341): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff0e0c2000 a2=0 a3=7fff0e0c1fec items=0 ppid=2614 pid=4693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:33.690000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:32:33.754576 kernel: audit: type=1327 audit(1734100353.690:1341): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:32:33.709000 audit[4693]: NETFILTER_CFG table=nat:120 family=2 entries=30 op=nft_register_rule pid=4693 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:32:33.767678 kernel: audit: type=1325 audit(1734100353.709:1342): table=nat:120 family=2 entries=30 op=nft_register_rule pid=4693 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:32:33.709000 audit[4693]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7fff0e0c2000 a2=0 a3=7fff0e0c1fec items=0 ppid=2614 pid=4693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:33.790974 kubelet[2458]: I1213 14:32:33.785712 2458 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-f9f5cc4c-fjz2l" podStartSLOduration=41.451704004 podStartE2EDuration="46.785682077s" podCreationTimestamp="2024-12-13 14:31:47 +0000 UTC" firstStartedPulling="2024-12-13 14:32:27.608505941 +0000 UTC m=+54.523493690" lastFinishedPulling="2024-12-13 14:32:32.942484114 +0000 UTC m=+59.857471763" observedRunningTime="2024-12-13 14:32:33.653948333 +0000 UTC m=+60.568935982" watchObservedRunningTime="2024-12-13 14:32:33.785682077 +0000 UTC m=+60.700669726" Dec 13 14:32:33.792637 kernel: audit: type=1300 audit(1734100353.709:1342): arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7fff0e0c2000 a2=0 a3=7fff0e0c1fec items=0 ppid=2614 pid=4693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:33.709000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:32:33.803752 kernel: audit: type=1327 audit(1734100353.709:1342): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:32:33.839074 env[1414]: 2024-12-13 14:32:33.767 [WARNING][4688] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.6--a--f6adf0345d-k8s-csi--node--driver--5fclm-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"97d535fd-6d62-48fb-8a31-b56e5e376a53", ResourceVersion:"844", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 14, 31, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"56747c9949", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.6-a-f6adf0345d", ContainerID:"af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e", Pod:"csi-node-driver-5fclm", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.37.69/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali9b7cbc33af7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 14:32:33.839074 env[1414]: 2024-12-13 14:32:33.768 [INFO][4688] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" Dec 13 14:32:33.839074 env[1414]: 2024-12-13 14:32:33.768 [INFO][4688] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" iface="eth0" netns="" Dec 13 14:32:33.839074 env[1414]: 2024-12-13 14:32:33.768 [INFO][4688] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" Dec 13 14:32:33.839074 env[1414]: 2024-12-13 14:32:33.768 [INFO][4688] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" Dec 13 14:32:33.839074 env[1414]: 2024-12-13 14:32:33.825 [INFO][4698] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" HandleID="k8s-pod-network.791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" Workload="ci--3510.3.6--a--f6adf0345d-k8s-csi--node--driver--5fclm-eth0" Dec 13 14:32:33.839074 env[1414]: 2024-12-13 14:32:33.826 [INFO][4698] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 14:32:33.839074 env[1414]: 2024-12-13 14:32:33.826 [INFO][4698] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 14:32:33.839074 env[1414]: 2024-12-13 14:32:33.834 [WARNING][4698] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" HandleID="k8s-pod-network.791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" Workload="ci--3510.3.6--a--f6adf0345d-k8s-csi--node--driver--5fclm-eth0" Dec 13 14:32:33.839074 env[1414]: 2024-12-13 14:32:33.834 [INFO][4698] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" HandleID="k8s-pod-network.791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" Workload="ci--3510.3.6--a--f6adf0345d-k8s-csi--node--driver--5fclm-eth0" Dec 13 14:32:33.839074 env[1414]: 2024-12-13 14:32:33.835 [INFO][4698] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 14:32:33.839074 env[1414]: 2024-12-13 14:32:33.837 [INFO][4688] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" Dec 13 14:32:33.839074 env[1414]: time="2024-12-13T14:32:33.839039276Z" level=info msg="TearDown network for sandbox \"791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686\" successfully" Dec 13 14:32:33.839774 env[1414]: time="2024-12-13T14:32:33.839079876Z" level=info msg="StopPodSandbox for \"791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686\" returns successfully" Dec 13 14:32:33.841859 env[1414]: time="2024-12-13T14:32:33.840017778Z" level=info msg="RemovePodSandbox for \"791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686\"" Dec 13 14:32:33.841859 env[1414]: time="2024-12-13T14:32:33.840057678Z" level=info msg="Forcibly stopping sandbox \"791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686\"" Dec 13 14:32:33.957060 systemd[1]: run-containerd-runc-k8s.io-9d6dcf4f3e38c9198571eb5c3017eec686ba0907372bdf402ff60e4184b7420f-runc.hdtrca.mount: Deactivated successfully. Dec 13 14:32:33.966923 env[1414]: 2024-12-13 14:32:33.902 [WARNING][4717] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.6--a--f6adf0345d-k8s-csi--node--driver--5fclm-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"97d535fd-6d62-48fb-8a31-b56e5e376a53", ResourceVersion:"844", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 14, 31, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"56747c9949", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.6-a-f6adf0345d", ContainerID:"af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e", Pod:"csi-node-driver-5fclm", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.37.69/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali9b7cbc33af7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 14:32:33.966923 env[1414]: 2024-12-13 14:32:33.903 [INFO][4717] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" Dec 13 14:32:33.966923 env[1414]: 2024-12-13 14:32:33.903 [INFO][4717] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" iface="eth0" netns="" Dec 13 14:32:33.966923 env[1414]: 2024-12-13 14:32:33.903 [INFO][4717] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" Dec 13 14:32:33.966923 env[1414]: 2024-12-13 14:32:33.903 [INFO][4717] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" Dec 13 14:32:33.966923 env[1414]: 2024-12-13 14:32:33.947 [INFO][4725] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" HandleID="k8s-pod-network.791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" Workload="ci--3510.3.6--a--f6adf0345d-k8s-csi--node--driver--5fclm-eth0" Dec 13 14:32:33.966923 env[1414]: 2024-12-13 14:32:33.947 [INFO][4725] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 14:32:33.966923 env[1414]: 2024-12-13 14:32:33.947 [INFO][4725] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 14:32:33.966923 env[1414]: 2024-12-13 14:32:33.961 [WARNING][4725] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" HandleID="k8s-pod-network.791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" Workload="ci--3510.3.6--a--f6adf0345d-k8s-csi--node--driver--5fclm-eth0" Dec 13 14:32:33.966923 env[1414]: 2024-12-13 14:32:33.961 [INFO][4725] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" HandleID="k8s-pod-network.791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" Workload="ci--3510.3.6--a--f6adf0345d-k8s-csi--node--driver--5fclm-eth0" Dec 13 14:32:33.966923 env[1414]: 2024-12-13 14:32:33.963 [INFO][4725] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 14:32:33.966923 env[1414]: 2024-12-13 14:32:33.965 [INFO][4717] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686" Dec 13 14:32:33.967995 env[1414]: time="2024-12-13T14:32:33.967954115Z" level=info msg="TearDown network for sandbox \"791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686\" successfully" Dec 13 14:32:33.978745 env[1414]: time="2024-12-13T14:32:33.978689935Z" level=info msg="RemovePodSandbox \"791093d1e3a9cc2bdde552591552de31cc7992174758b85751d6895403a6f686\" returns successfully" Dec 13 14:32:33.979469 env[1414]: time="2024-12-13T14:32:33.979437736Z" level=info msg="StopPodSandbox for \"1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7\"" Dec 13 14:32:34.080599 env[1414]: 2024-12-13 14:32:34.039 [WARNING][4744] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--9pcc2-eth0", GenerateName:"coredns-6f6b679f8f-", Namespace:"kube-system", SelfLink:"", UID:"ab01c38b-ace9-49a5-9e1f-886c614236ba", ResourceVersion:"862", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 14, 31, 33, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"6f6b679f8f", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.6-a-f6adf0345d", ContainerID:"56f96db0c8ce71d6706d14f9ac224f77e4296def683dda756561b885e8963004", Pod:"coredns-6f6b679f8f-9pcc2", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.37.66/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2132811616a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 14:32:34.080599 env[1414]: 2024-12-13 14:32:34.039 [INFO][4744] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" Dec 13 14:32:34.080599 env[1414]: 2024-12-13 14:32:34.039 [INFO][4744] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" iface="eth0" netns="" Dec 13 14:32:34.080599 env[1414]: 2024-12-13 14:32:34.039 [INFO][4744] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" Dec 13 14:32:34.080599 env[1414]: 2024-12-13 14:32:34.039 [INFO][4744] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" Dec 13 14:32:34.080599 env[1414]: 2024-12-13 14:32:34.064 [INFO][4750] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" HandleID="k8s-pod-network.1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" Workload="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--9pcc2-eth0" Dec 13 14:32:34.080599 env[1414]: 2024-12-13 14:32:34.064 [INFO][4750] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 14:32:34.080599 env[1414]: 2024-12-13 14:32:34.064 [INFO][4750] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 14:32:34.080599 env[1414]: 2024-12-13 14:32:34.075 [WARNING][4750] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" HandleID="k8s-pod-network.1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" Workload="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--9pcc2-eth0" Dec 13 14:32:34.080599 env[1414]: 2024-12-13 14:32:34.075 [INFO][4750] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" HandleID="k8s-pod-network.1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" Workload="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--9pcc2-eth0" Dec 13 14:32:34.080599 env[1414]: 2024-12-13 14:32:34.078 [INFO][4750] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 14:32:34.080599 env[1414]: 2024-12-13 14:32:34.079 [INFO][4744] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" Dec 13 14:32:34.081246 env[1414]: time="2024-12-13T14:32:34.080649423Z" level=info msg="TearDown network for sandbox \"1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7\" successfully" Dec 13 14:32:34.081246 env[1414]: time="2024-12-13T14:32:34.080687123Z" level=info msg="StopPodSandbox for \"1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7\" returns successfully" Dec 13 14:32:34.081511 env[1414]: time="2024-12-13T14:32:34.081478424Z" level=info msg="RemovePodSandbox for \"1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7\"" Dec 13 14:32:34.081649 env[1414]: time="2024-12-13T14:32:34.081517524Z" level=info msg="Forcibly stopping sandbox \"1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7\"" Dec 13 14:32:34.188874 env[1414]: 2024-12-13 14:32:34.134 [WARNING][4768] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--9pcc2-eth0", GenerateName:"coredns-6f6b679f8f-", Namespace:"kube-system", SelfLink:"", UID:"ab01c38b-ace9-49a5-9e1f-886c614236ba", ResourceVersion:"862", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 14, 31, 33, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"6f6b679f8f", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.6-a-f6adf0345d", ContainerID:"56f96db0c8ce71d6706d14f9ac224f77e4296def683dda756561b885e8963004", Pod:"coredns-6f6b679f8f-9pcc2", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.37.66/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2132811616a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 14:32:34.188874 env[1414]: 2024-12-13 14:32:34.135 [INFO][4768] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" Dec 13 14:32:34.188874 env[1414]: 2024-12-13 14:32:34.135 [INFO][4768] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" iface="eth0" netns="" Dec 13 14:32:34.188874 env[1414]: 2024-12-13 14:32:34.135 [INFO][4768] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" Dec 13 14:32:34.188874 env[1414]: 2024-12-13 14:32:34.135 [INFO][4768] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" Dec 13 14:32:34.188874 env[1414]: 2024-12-13 14:32:34.170 [INFO][4774] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" HandleID="k8s-pod-network.1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" Workload="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--9pcc2-eth0" Dec 13 14:32:34.188874 env[1414]: 2024-12-13 14:32:34.170 [INFO][4774] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 14:32:34.188874 env[1414]: 2024-12-13 14:32:34.170 [INFO][4774] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 14:32:34.188874 env[1414]: 2024-12-13 14:32:34.180 [WARNING][4774] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" HandleID="k8s-pod-network.1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" Workload="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--9pcc2-eth0" Dec 13 14:32:34.188874 env[1414]: 2024-12-13 14:32:34.180 [INFO][4774] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" HandleID="k8s-pod-network.1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" Workload="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--9pcc2-eth0" Dec 13 14:32:34.188874 env[1414]: 2024-12-13 14:32:34.181 [INFO][4774] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 14:32:34.188874 env[1414]: 2024-12-13 14:32:34.185 [INFO][4768] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7" Dec 13 14:32:34.188874 env[1414]: time="2024-12-13T14:32:34.187575020Z" level=info msg="TearDown network for sandbox \"1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7\" successfully" Dec 13 14:32:34.207344 env[1414]: time="2024-12-13T14:32:34.207286156Z" level=info msg="RemovePodSandbox \"1ec25ff6b9e9b28e64fbf3fccf5cf38527d477371a221d757dafe032b414eae7\" returns successfully" Dec 13 14:32:34.207916 env[1414]: time="2024-12-13T14:32:34.207884357Z" level=info msg="StopPodSandbox for \"2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38\"" Dec 13 14:32:34.316978 env[1414]: 2024-12-13 14:32:34.270 [WARNING][4793] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--6dpql-eth0", GenerateName:"coredns-6f6b679f8f-", Namespace:"kube-system", SelfLink:"", UID:"a502a44e-8475-402c-b0b4-09e660487f43", ResourceVersion:"866", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 14, 31, 33, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"6f6b679f8f", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.6-a-f6adf0345d", ContainerID:"7256cab8e74df9d9aac07a099461f11f315d80728a8cdd424da9ae01e67b9a4b", Pod:"coredns-6f6b679f8f-6dpql", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.37.70/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7862d805644", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 14:32:34.316978 env[1414]: 2024-12-13 14:32:34.270 [INFO][4793] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" Dec 13 14:32:34.316978 env[1414]: 2024-12-13 14:32:34.270 [INFO][4793] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" iface="eth0" netns="" Dec 13 14:32:34.316978 env[1414]: 2024-12-13 14:32:34.270 [INFO][4793] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" Dec 13 14:32:34.316978 env[1414]: 2024-12-13 14:32:34.270 [INFO][4793] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" Dec 13 14:32:34.316978 env[1414]: 2024-12-13 14:32:34.305 [INFO][4799] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" HandleID="k8s-pod-network.2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" Workload="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--6dpql-eth0" Dec 13 14:32:34.316978 env[1414]: 2024-12-13 14:32:34.305 [INFO][4799] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 14:32:34.316978 env[1414]: 2024-12-13 14:32:34.305 [INFO][4799] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 14:32:34.316978 env[1414]: 2024-12-13 14:32:34.311 [WARNING][4799] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" HandleID="k8s-pod-network.2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" Workload="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--6dpql-eth0" Dec 13 14:32:34.316978 env[1414]: 2024-12-13 14:32:34.312 [INFO][4799] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" HandleID="k8s-pod-network.2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" Workload="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--6dpql-eth0" Dec 13 14:32:34.316978 env[1414]: 2024-12-13 14:32:34.314 [INFO][4799] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 14:32:34.316978 env[1414]: 2024-12-13 14:32:34.315 [INFO][4793] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" Dec 13 14:32:34.317672 env[1414]: time="2024-12-13T14:32:34.317037058Z" level=info msg="TearDown network for sandbox \"2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38\" successfully" Dec 13 14:32:34.317672 env[1414]: time="2024-12-13T14:32:34.317092658Z" level=info msg="StopPodSandbox for \"2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38\" returns successfully" Dec 13 14:32:34.318050 env[1414]: time="2024-12-13T14:32:34.318009160Z" level=info msg="RemovePodSandbox for \"2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38\"" Dec 13 14:32:34.318173 env[1414]: time="2024-12-13T14:32:34.318044360Z" level=info msg="Forcibly stopping sandbox \"2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38\"" Dec 13 14:32:34.424098 env[1414]: 2024-12-13 14:32:34.373 [WARNING][4818] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--6dpql-eth0", GenerateName:"coredns-6f6b679f8f-", Namespace:"kube-system", SelfLink:"", UID:"a502a44e-8475-402c-b0b4-09e660487f43", ResourceVersion:"866", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 14, 31, 33, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"6f6b679f8f", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.6-a-f6adf0345d", ContainerID:"7256cab8e74df9d9aac07a099461f11f315d80728a8cdd424da9ae01e67b9a4b", Pod:"coredns-6f6b679f8f-6dpql", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.37.70/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7862d805644", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 14:32:34.424098 env[1414]: 2024-12-13 14:32:34.374 [INFO][4818] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" Dec 13 14:32:34.424098 env[1414]: 2024-12-13 14:32:34.374 [INFO][4818] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" iface="eth0" netns="" Dec 13 14:32:34.424098 env[1414]: 2024-12-13 14:32:34.374 [INFO][4818] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" Dec 13 14:32:34.424098 env[1414]: 2024-12-13 14:32:34.374 [INFO][4818] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" Dec 13 14:32:34.424098 env[1414]: 2024-12-13 14:32:34.403 [INFO][4824] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" HandleID="k8s-pod-network.2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" Workload="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--6dpql-eth0" Dec 13 14:32:34.424098 env[1414]: 2024-12-13 14:32:34.403 [INFO][4824] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 14:32:34.424098 env[1414]: 2024-12-13 14:32:34.403 [INFO][4824] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 14:32:34.424098 env[1414]: 2024-12-13 14:32:34.413 [WARNING][4824] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" HandleID="k8s-pod-network.2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" Workload="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--6dpql-eth0" Dec 13 14:32:34.424098 env[1414]: 2024-12-13 14:32:34.413 [INFO][4824] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" HandleID="k8s-pod-network.2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" Workload="ci--3510.3.6--a--f6adf0345d-k8s-coredns--6f6b679f8f--6dpql-eth0" Dec 13 14:32:34.424098 env[1414]: 2024-12-13 14:32:34.415 [INFO][4824] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 14:32:34.424098 env[1414]: 2024-12-13 14:32:34.422 [INFO][4818] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38" Dec 13 14:32:34.424922 env[1414]: time="2024-12-13T14:32:34.424883157Z" level=info msg="TearDown network for sandbox \"2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38\" successfully" Dec 13 14:32:34.434336 env[1414]: time="2024-12-13T14:32:34.434286774Z" level=info msg="RemovePodSandbox \"2983bd0fbc87a7739cd1bbd5b594ba9bd1971e196cb7985ee4ac2eb11d7e6d38\" returns successfully" Dec 13 14:32:34.434908 env[1414]: time="2024-12-13T14:32:34.434871775Z" level=info msg="StopPodSandbox for \"0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa\"" Dec 13 14:32:34.587563 kubelet[2458]: I1213 14:32:34.587517 2458 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Dec 13 14:32:34.624196 env[1414]: 2024-12-13 14:32:34.536 [WARNING][4843] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--wmp2w-eth0", GenerateName:"calico-apiserver-686fc44668-", Namespace:"calico-apiserver", SelfLink:"", UID:"a16f2d4c-353e-4324-a00d-1da60b685d6a", ResourceVersion:"900", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 14, 31, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"686fc44668", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.6-a-f6adf0345d", ContainerID:"f4d75e82bab4aeb96bf41c872be36337eeb0ed811b81c269d1e80e6bcef79171", Pod:"calico-apiserver-686fc44668-wmp2w", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.37.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidf8ba8ffb00", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 14:32:34.624196 env[1414]: 2024-12-13 14:32:34.537 [INFO][4843] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" Dec 13 14:32:34.624196 env[1414]: 2024-12-13 14:32:34.537 [INFO][4843] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" iface="eth0" netns="" Dec 13 14:32:34.624196 env[1414]: 2024-12-13 14:32:34.537 [INFO][4843] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" Dec 13 14:32:34.624196 env[1414]: 2024-12-13 14:32:34.537 [INFO][4843] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" Dec 13 14:32:34.624196 env[1414]: 2024-12-13 14:32:34.600 [INFO][4849] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" HandleID="k8s-pod-network.0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--wmp2w-eth0" Dec 13 14:32:34.624196 env[1414]: 2024-12-13 14:32:34.600 [INFO][4849] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 14:32:34.624196 env[1414]: 2024-12-13 14:32:34.601 [INFO][4849] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 14:32:34.624196 env[1414]: 2024-12-13 14:32:34.610 [WARNING][4849] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" HandleID="k8s-pod-network.0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--wmp2w-eth0" Dec 13 14:32:34.624196 env[1414]: 2024-12-13 14:32:34.610 [INFO][4849] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" HandleID="k8s-pod-network.0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--wmp2w-eth0" Dec 13 14:32:34.624196 env[1414]: 2024-12-13 14:32:34.615 [INFO][4849] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 14:32:34.624196 env[1414]: 2024-12-13 14:32:34.616 [INFO][4843] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" Dec 13 14:32:34.624923 env[1414]: time="2024-12-13T14:32:34.624254324Z" level=info msg="TearDown network for sandbox \"0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa\" successfully" Dec 13 14:32:34.624923 env[1414]: time="2024-12-13T14:32:34.624298024Z" level=info msg="StopPodSandbox for \"0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa\" returns successfully" Dec 13 14:32:34.624923 env[1414]: time="2024-12-13T14:32:34.624900425Z" level=info msg="RemovePodSandbox for \"0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa\"" Dec 13 14:32:34.625047 env[1414]: time="2024-12-13T14:32:34.624935026Z" level=info msg="Forcibly stopping sandbox \"0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa\"" Dec 13 14:32:34.809165 env[1414]: 2024-12-13 14:32:34.736 [WARNING][4870] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--wmp2w-eth0", GenerateName:"calico-apiserver-686fc44668-", Namespace:"calico-apiserver", SelfLink:"", UID:"a16f2d4c-353e-4324-a00d-1da60b685d6a", ResourceVersion:"900", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 14, 31, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"686fc44668", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.6-a-f6adf0345d", ContainerID:"f4d75e82bab4aeb96bf41c872be36337eeb0ed811b81c269d1e80e6bcef79171", Pod:"calico-apiserver-686fc44668-wmp2w", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.37.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidf8ba8ffb00", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 14:32:34.809165 env[1414]: 2024-12-13 14:32:34.737 [INFO][4870] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" Dec 13 14:32:34.809165 env[1414]: 2024-12-13 14:32:34.739 [INFO][4870] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" iface="eth0" netns="" Dec 13 14:32:34.809165 env[1414]: 2024-12-13 14:32:34.739 [INFO][4870] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" Dec 13 14:32:34.809165 env[1414]: 2024-12-13 14:32:34.739 [INFO][4870] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" Dec 13 14:32:34.809165 env[1414]: 2024-12-13 14:32:34.790 [INFO][4876] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" HandleID="k8s-pod-network.0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--wmp2w-eth0" Dec 13 14:32:34.809165 env[1414]: 2024-12-13 14:32:34.794 [INFO][4876] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 14:32:34.809165 env[1414]: 2024-12-13 14:32:34.794 [INFO][4876] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 14:32:34.809165 env[1414]: 2024-12-13 14:32:34.802 [WARNING][4876] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" HandleID="k8s-pod-network.0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--wmp2w-eth0" Dec 13 14:32:34.809165 env[1414]: 2024-12-13 14:32:34.802 [INFO][4876] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" HandleID="k8s-pod-network.0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--wmp2w-eth0" Dec 13 14:32:34.809165 env[1414]: 2024-12-13 14:32:34.803 [INFO][4876] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 14:32:34.809165 env[1414]: 2024-12-13 14:32:34.806 [INFO][4870] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa" Dec 13 14:32:34.809864 env[1414]: time="2024-12-13T14:32:34.809202565Z" level=info msg="TearDown network for sandbox \"0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa\" successfully" Dec 13 14:32:34.822710 env[1414]: time="2024-12-13T14:32:34.822656790Z" level=info msg="RemovePodSandbox \"0ff46b2477c504a3262f552e8d2ba6e93ea898aaeb5392b9cd1ca33323056cfa\" returns successfully" Dec 13 14:32:34.823243 env[1414]: time="2024-12-13T14:32:34.823197691Z" level=info msg="StopPodSandbox for \"db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210\"" Dec 13 14:32:34.928533 env[1414]: time="2024-12-13T14:32:34.928414585Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:32:34.936837 env[1414]: time="2024-12-13T14:32:34.936787700Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bda8c42e04758c4f061339e213f50ccdc7502c4176fbf631aa12357e62b63540,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:32:34.941506 env[1414]: time="2024-12-13T14:32:34.941469509Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:32:34.946867 env[1414]: time="2024-12-13T14:32:34.946820019Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:eaa7e01fb16b603c155a67b81f16992281db7f831684c7b2081d3434587a7ff3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:32:34.947194 env[1414]: time="2024-12-13T14:32:34.947150619Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.29.1\" returns image reference \"sha256:bda8c42e04758c4f061339e213f50ccdc7502c4176fbf631aa12357e62b63540\"" Dec 13 14:32:34.950689 env[1414]: time="2024-12-13T14:32:34.950652826Z" level=info msg="CreateContainer within sandbox \"af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Dec 13 14:32:34.969428 env[1414]: 2024-12-13 14:32:34.911 [WARNING][4895] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--frvqf-eth0", GenerateName:"calico-apiserver-686fc44668-", Namespace:"calico-apiserver", SelfLink:"", UID:"50dce1b7-10b8-45fe-a58b-95a13522c319", ResourceVersion:"881", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 14, 31, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"686fc44668", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.6-a-f6adf0345d", ContainerID:"8fed8093e657db879e1e6e6ceac1aece6cc0b64b157ddca361d18e14c2d2832a", Pod:"calico-apiserver-686fc44668-frvqf", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.37.65/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali0dcb527601a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 14:32:34.969428 env[1414]: 2024-12-13 14:32:34.911 [INFO][4895] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" Dec 13 14:32:34.969428 env[1414]: 2024-12-13 14:32:34.911 [INFO][4895] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" iface="eth0" netns="" Dec 13 14:32:34.969428 env[1414]: 2024-12-13 14:32:34.911 [INFO][4895] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" Dec 13 14:32:34.969428 env[1414]: 2024-12-13 14:32:34.911 [INFO][4895] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" Dec 13 14:32:34.969428 env[1414]: 2024-12-13 14:32:34.955 [INFO][4901] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" HandleID="k8s-pod-network.db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--frvqf-eth0" Dec 13 14:32:34.969428 env[1414]: 2024-12-13 14:32:34.955 [INFO][4901] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 14:32:34.969428 env[1414]: 2024-12-13 14:32:34.956 [INFO][4901] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 14:32:34.969428 env[1414]: 2024-12-13 14:32:34.963 [WARNING][4901] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" HandleID="k8s-pod-network.db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--frvqf-eth0" Dec 13 14:32:34.969428 env[1414]: 2024-12-13 14:32:34.963 [INFO][4901] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" HandleID="k8s-pod-network.db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--frvqf-eth0" Dec 13 14:32:34.969428 env[1414]: 2024-12-13 14:32:34.965 [INFO][4901] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 14:32:34.969428 env[1414]: 2024-12-13 14:32:34.968 [INFO][4895] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" Dec 13 14:32:34.970320 env[1414]: time="2024-12-13T14:32:34.970275262Z" level=info msg="TearDown network for sandbox \"db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210\" successfully" Dec 13 14:32:34.970320 env[1414]: time="2024-12-13T14:32:34.970317062Z" level=info msg="StopPodSandbox for \"db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210\" returns successfully" Dec 13 14:32:34.970834 env[1414]: time="2024-12-13T14:32:34.970793463Z" level=info msg="RemovePodSandbox for \"db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210\"" Dec 13 14:32:34.971012 env[1414]: time="2024-12-13T14:32:34.970826563Z" level=info msg="Forcibly stopping sandbox \"db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210\"" Dec 13 14:32:34.986531 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount15322678.mount: Deactivated successfully. Dec 13 14:32:35.004639 env[1414]: time="2024-12-13T14:32:35.004585225Z" level=info msg="CreateContainer within sandbox \"af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"16bb1c3ac07a0e50be3f3bc4211b5359afda58d0667aade700989254efc703a3\"" Dec 13 14:32:35.005610 env[1414]: time="2024-12-13T14:32:35.005571827Z" level=info msg="StartContainer for \"16bb1c3ac07a0e50be3f3bc4211b5359afda58d0667aade700989254efc703a3\"" Dec 13 14:32:35.075635 systemd[1]: run-containerd-runc-k8s.io-16bb1c3ac07a0e50be3f3bc4211b5359afda58d0667aade700989254efc703a3-runc.kgroAY.mount: Deactivated successfully. Dec 13 14:32:35.083377 systemd[1]: Started cri-containerd-16bb1c3ac07a0e50be3f3bc4211b5359afda58d0667aade700989254efc703a3.scope. Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { perfmon } for pid=4932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.131685 kernel: audit: type=1400 audit(1734100355.115:1343): avc: denied { perfmon } for pid=4932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit[4932]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7fdde59ece68 items=0 ppid=4264 pid=4932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:35.155080 env[1414]: 2024-12-13 14:32:35.082 [WARNING][4920] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--frvqf-eth0", GenerateName:"calico-apiserver-686fc44668-", Namespace:"calico-apiserver", SelfLink:"", UID:"50dce1b7-10b8-45fe-a58b-95a13522c319", ResourceVersion:"881", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 14, 31, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"686fc44668", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.6-a-f6adf0345d", ContainerID:"8fed8093e657db879e1e6e6ceac1aece6cc0b64b157ddca361d18e14c2d2832a", Pod:"calico-apiserver-686fc44668-frvqf", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.37.65/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali0dcb527601a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 14:32:35.155080 env[1414]: 2024-12-13 14:32:35.088 [INFO][4920] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" Dec 13 14:32:35.155080 env[1414]: 2024-12-13 14:32:35.088 [INFO][4920] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" iface="eth0" netns="" Dec 13 14:32:35.155080 env[1414]: 2024-12-13 14:32:35.088 [INFO][4920] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" Dec 13 14:32:35.155080 env[1414]: 2024-12-13 14:32:35.088 [INFO][4920] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" Dec 13 14:32:35.155080 env[1414]: 2024-12-13 14:32:35.121 [INFO][4944] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" HandleID="k8s-pod-network.db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--frvqf-eth0" Dec 13 14:32:35.155080 env[1414]: 2024-12-13 14:32:35.121 [INFO][4944] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 14:32:35.155080 env[1414]: 2024-12-13 14:32:35.121 [INFO][4944] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 14:32:35.155080 env[1414]: 2024-12-13 14:32:35.127 [WARNING][4944] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" HandleID="k8s-pod-network.db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--frvqf-eth0" Dec 13 14:32:35.155080 env[1414]: 2024-12-13 14:32:35.127 [INFO][4944] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" HandleID="k8s-pod-network.db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--apiserver--686fc44668--frvqf-eth0" Dec 13 14:32:35.155080 env[1414]: 2024-12-13 14:32:35.129 [INFO][4944] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 14:32:35.155080 env[1414]: 2024-12-13 14:32:35.130 [INFO][4920] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210" Dec 13 14:32:35.155080 env[1414]: time="2024-12-13T14:32:35.134958764Z" level=info msg="TearDown network for sandbox \"db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210\" successfully" Dec 13 14:32:35.155761 kernel: audit: type=1300 audit(1734100355.115:1343): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7fdde59ece68 items=0 ppid=4264 pid=4932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:35.115000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136626231633361633037613065353062653366336263343231316235 Dec 13 14:32:35.163194 env[1414]: time="2024-12-13T14:32:35.163154416Z" level=info msg="RemovePodSandbox \"db520e423cc877acca8b94774d0e52ef2fd0994082dc27273393d01b11c01210\" returns successfully" Dec 13 14:32:35.179624 kernel: audit: type=1327 audit(1734100355.115:1343): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136626231633361633037613065353062653366336263343231316235 Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { bpf } for pid=4932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.200574 kernel: audit: type=1400 audit(1734100355.115:1344): avc: denied { bpf } for pid=4932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { bpf } for pid=4932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { bpf } for pid=4932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { perfmon } for pid=4932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { perfmon } for pid=4932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { perfmon } for pid=4932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { perfmon } for pid=4932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { perfmon } for pid=4932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { bpf } for pid=4932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { bpf } for pid=4932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit: BPF prog-id=200 op=LOAD Dec 13 14:32:35.115000 audit[4932]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c000382a78 items=0 ppid=4264 pid=4932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:35.115000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136626231633361633037613065353062653366336263343231316235 Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { bpf } for pid=4932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { bpf } for pid=4932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { perfmon } for pid=4932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { perfmon } for pid=4932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { perfmon } for pid=4932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { perfmon } for pid=4932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { perfmon } for pid=4932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { bpf } for pid=4932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { bpf } for pid=4932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit: BPF prog-id=201 op=LOAD Dec 13 14:32:35.115000 audit[4932]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c000382ac8 items=0 ppid=4264 pid=4932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:35.115000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136626231633361633037613065353062653366336263343231316235 Dec 13 14:32:35.115000 audit: BPF prog-id=201 op=UNLOAD Dec 13 14:32:35.115000 audit: BPF prog-id=200 op=UNLOAD Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { bpf } for pid=4932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { bpf } for pid=4932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { bpf } for pid=4932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { perfmon } for pid=4932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { perfmon } for pid=4932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { perfmon } for pid=4932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { perfmon } for pid=4932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { perfmon } for pid=4932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { bpf } for pid=4932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit[4932]: AVC avc: denied { bpf } for pid=4932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:35.115000 audit: BPF prog-id=202 op=LOAD Dec 13 14:32:35.115000 audit[4932]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c000382b58 items=0 ppid=4264 pid=4932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:35.115000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136626231633361633037613065353062653366336263343231316235 Dec 13 14:32:35.208904 env[1414]: time="2024-12-13T14:32:35.208844499Z" level=info msg="StartContainer for \"16bb1c3ac07a0e50be3f3bc4211b5359afda58d0667aade700989254efc703a3\" returns successfully" Dec 13 14:32:35.210391 env[1414]: time="2024-12-13T14:32:35.210346702Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.29.1\"" Dec 13 14:32:35.242000 audit[4609]: AVC avc: denied { watch } for pid=4609 comm="apiserver" path="/calico-apiserver-certs/..2024_12_13_14_32_10.647068444/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c174,c671 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c174,c671 tclass=file permissive=0 Dec 13 14:32:35.242000 audit[4609]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0016d3500 a2=fc6 a3=0 items=0 ppid=4224 pid=4609 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c174,c671 key=(null) Dec 13 14:32:35.242000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Dec 13 14:32:36.707562 env[1414]: time="2024-12-13T14:32:36.707500239Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:32:36.713461 env[1414]: time="2024-12-13T14:32:36.713404649Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8b7d18f262d5cf6a6343578ad0db68a140c4c9989d9e02c58c27cb5d2c70320f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:32:36.717732 env[1414]: time="2024-12-13T14:32:36.717687657Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:32:36.721042 env[1414]: time="2024-12-13T14:32:36.720994363Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:a338da9488cbaa83c78457c3d7354d84149969c0480e88dd768e036632ff5b76,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 14:32:36.721673 env[1414]: time="2024-12-13T14:32:36.721641164Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.29.1\" returns image reference \"sha256:8b7d18f262d5cf6a6343578ad0db68a140c4c9989d9e02c58c27cb5d2c70320f\"" Dec 13 14:32:36.724803 env[1414]: time="2024-12-13T14:32:36.724369169Z" level=info msg="CreateContainer within sandbox \"af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Dec 13 14:32:36.760668 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4208842089.mount: Deactivated successfully. Dec 13 14:32:36.773923 env[1414]: time="2024-12-13T14:32:36.773866760Z" level=info msg="CreateContainer within sandbox \"af257dc62d280b9e679e3cdcfb5e1fbfc374c7580eb6cf139833cb622066dc8e\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"50bb7b9ab3effdce0c4d7741241bc724b8130bc401f6b0aa24f0ff1fc6ced2f6\"" Dec 13 14:32:36.774615 env[1414]: time="2024-12-13T14:32:36.774481361Z" level=info msg="StartContainer for \"50bb7b9ab3effdce0c4d7741241bc724b8130bc401f6b0aa24f0ff1fc6ced2f6\"" Dec 13 14:32:36.798746 systemd[1]: Started cri-containerd-50bb7b9ab3effdce0c4d7741241bc724b8130bc401f6b0aa24f0ff1fc6ced2f6.scope. Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit[4974]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7fdab2e0fc28 items=0 ppid=4264 pid=4974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:36.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530626237623961623365666664636530633464373734313234316263 Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { bpf } for pid=4974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { bpf } for pid=4974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { bpf } for pid=4974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { bpf } for pid=4974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { bpf } for pid=4974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit: BPF prog-id=203 op=LOAD Dec 13 14:32:36.823000 audit[4974]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c0001b70b8 items=0 ppid=4264 pid=4974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:36.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530626237623961623365666664636530633464373734313234316263 Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { bpf } for pid=4974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { bpf } for pid=4974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { bpf } for pid=4974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { bpf } for pid=4974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit: BPF prog-id=204 op=LOAD Dec 13 14:32:36.823000 audit[4974]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c0001b7108 items=0 ppid=4264 pid=4974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:36.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530626237623961623365666664636530633464373734313234316263 Dec 13 14:32:36.823000 audit: BPF prog-id=204 op=UNLOAD Dec 13 14:32:36.823000 audit: BPF prog-id=203 op=UNLOAD Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { bpf } for pid=4974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { bpf } for pid=4974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { bpf } for pid=4974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { bpf } for pid=4974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit[4974]: AVC avc: denied { bpf } for pid=4974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:32:36.823000 audit: BPF prog-id=205 op=LOAD Dec 13 14:32:36.823000 audit[4974]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c0001b7198 items=0 ppid=4264 pid=4974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:36.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530626237623961623365666664636530633464373734313234316263 Dec 13 14:32:36.842095 env[1414]: time="2024-12-13T14:32:36.842041984Z" level=info msg="StartContainer for \"50bb7b9ab3effdce0c4d7741241bc724b8130bc401f6b0aa24f0ff1fc6ced2f6\" returns successfully" Dec 13 14:32:37.421850 kubelet[2458]: I1213 14:32:37.421809 2458 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Dec 13 14:32:37.421850 kubelet[2458]: I1213 14:32:37.421861 2458 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Dec 13 14:32:37.611616 kubelet[2458]: I1213 14:32:37.611527 2458 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-5fclm" podStartSLOduration=42.139673587 podStartE2EDuration="50.611499081s" podCreationTimestamp="2024-12-13 14:31:47 +0000 UTC" firstStartedPulling="2024-12-13 14:32:28.251060473 +0000 UTC m=+55.166048122" lastFinishedPulling="2024-12-13 14:32:36.722885867 +0000 UTC m=+63.637873616" observedRunningTime="2024-12-13 14:32:37.61096458 +0000 UTC m=+64.525952329" watchObservedRunningTime="2024-12-13 14:32:37.611499081 +0000 UTC m=+64.526486730" Dec 13 14:32:40.414338 systemd[1]: run-containerd-runc-k8s.io-9d6dcf4f3e38c9198571eb5c3017eec686ba0907372bdf402ff60e4184b7420f-runc.v8V9kr.mount: Deactivated successfully. Dec 13 14:32:43.663993 systemd[1]: run-containerd-runc-k8s.io-712c356776dbc5d93ac010df3d5eaba59384f8db14ad44b232867b0e07ff03c4-runc.doD4a9.mount: Deactivated successfully. Dec 13 14:32:48.390026 env[1414]: time="2024-12-13T14:32:48.389338850Z" level=info msg="StopContainer for \"9db45fac40121283996d4cd6bd76d1c2fd7e5e300a47596ffaf4368e7c591ade\" with timeout 300 (s)" Dec 13 14:32:48.390026 env[1414]: time="2024-12-13T14:32:48.389835560Z" level=info msg="Stop container \"9db45fac40121283996d4cd6bd76d1c2fd7e5e300a47596ffaf4368e7c591ade\" with signal terminated" Dec 13 14:32:49.868206 kernel: kauditd_printk_skb: 85 callbacks suppressed Dec 13 14:32:49.871178 kernel: audit: type=1325 audit(1734100368.431:1356): table=filter:121 family=2 entries=8 op=nft_register_rule pid=5072 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:32:49.871263 kernel: audit: type=1300 audit(1734100368.431:1356): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe91a19690 a2=0 a3=7ffe91a1967c items=0 ppid=2614 pid=5072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:49.871303 kernel: audit: type=1327 audit(1734100368.431:1356): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:32:49.871339 kernel: audit: type=1325 audit(1734100368.450:1357): table=nat:122 family=2 entries=30 op=nft_register_rule pid=5072 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:32:49.871366 kernel: audit: type=1300 audit(1734100368.450:1357): arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7ffe91a19690 a2=0 a3=7ffe91a1967c items=0 ppid=2614 pid=5072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:49.871393 kernel: audit: type=1327 audit(1734100368.450:1357): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:32:49.871420 kernel: audit: type=1334 audit(1734100368.651:1358): prog-id=192 op=UNLOAD Dec 13 14:32:49.871445 kernel: audit: type=1334 audit(1734100368.659:1359): prog-id=195 op=UNLOAD Dec 13 14:32:49.871470 kernel: audit: type=1325 audit(1734100369.215:1360): table=filter:123 family=2 entries=8 op=nft_register_rule pid=5137 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:32:49.871494 kernel: audit: type=1300 audit(1734100369.215:1360): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffdf99301b0 a2=0 a3=7ffdf993019c items=0 ppid=2614 pid=5137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:48.431000 audit[5072]: NETFILTER_CFG table=filter:121 family=2 entries=8 op=nft_register_rule pid=5072 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:32:48.431000 audit[5072]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe91a19690 a2=0 a3=7ffe91a1967c items=0 ppid=2614 pid=5072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:48.431000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:32:48.450000 audit[5072]: NETFILTER_CFG table=nat:122 family=2 entries=30 op=nft_register_rule pid=5072 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:32:48.450000 audit[5072]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7ffe91a19690 a2=0 a3=7ffe91a1967c items=0 ppid=2614 pid=5072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:48.450000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:32:48.651000 audit: BPF prog-id=192 op=UNLOAD Dec 13 14:32:48.659000 audit: BPF prog-id=195 op=UNLOAD Dec 13 14:32:49.215000 audit[5137]: NETFILTER_CFG table=filter:123 family=2 entries=8 op=nft_register_rule pid=5137 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:32:49.215000 audit[5137]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffdf99301b0 a2=0 a3=7ffdf993019c items=0 ppid=2614 pid=5137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:49.215000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:32:49.251000 audit[5137]: NETFILTER_CFG table=nat:124 family=2 entries=34 op=nft_register_chain pid=5137 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:32:49.251000 audit[5137]: SYSCALL arch=c000003e syscall=46 success=yes exit=11236 a0=3 a1=7ffdf99301b0 a2=0 a3=7ffdf993019c items=0 ppid=2614 pid=5137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:32:49.251000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:32:49.447000 audit: BPF prog-id=124 op=UNLOAD Dec 13 14:32:49.451000 audit: BPF prog-id=127 op=UNLOAD Dec 13 14:32:49.872624 env[1414]: time="2024-12-13T14:32:48.636330889Z" level=info msg="StopContainer for \"9d6dcf4f3e38c9198571eb5c3017eec686ba0907372bdf402ff60e4184b7420f\" with timeout 30 (s)" Dec 13 14:32:49.872624 env[1414]: time="2024-12-13T14:32:48.636871100Z" level=info msg="Stop container \"9d6dcf4f3e38c9198571eb5c3017eec686ba0907372bdf402ff60e4184b7420f\" with signal terminated" Dec 13 14:32:49.872624 env[1414]: time="2024-12-13T14:32:48.709514452Z" level=info msg="shim disconnected" id=9d6dcf4f3e38c9198571eb5c3017eec686ba0907372bdf402ff60e4184b7420f Dec 13 14:32:49.872624 env[1414]: time="2024-12-13T14:32:48.709588954Z" level=warning msg="cleaning up after shim disconnected" id=9d6dcf4f3e38c9198571eb5c3017eec686ba0907372bdf402ff60e4184b7420f namespace=k8s.io Dec 13 14:32:49.872624 env[1414]: time="2024-12-13T14:32:48.709601254Z" level=info msg="cleaning up dead shim" Dec 13 14:32:49.872624 env[1414]: time="2024-12-13T14:32:48.733379729Z" level=warning msg="cleanup warnings time=\"2024-12-13T14:32:48Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5116 runtime=io.containerd.runc.v2\n" Dec 13 14:32:49.872624 env[1414]: time="2024-12-13T14:32:48.746257887Z" level=info msg="StopContainer for \"712c356776dbc5d93ac010df3d5eaba59384f8db14ad44b232867b0e07ff03c4\" with timeout 5 (s)" Dec 13 14:32:49.872624 env[1414]: time="2024-12-13T14:32:48.746530092Z" level=info msg="Stop container \"712c356776dbc5d93ac010df3d5eaba59384f8db14ad44b232867b0e07ff03c4\" with signal terminated" Dec 13 14:32:49.872624 env[1414]: time="2024-12-13T14:32:49.473451805Z" level=info msg="shim disconnected" id=9db45fac40121283996d4cd6bd76d1c2fd7e5e300a47596ffaf4368e7c591ade Dec 13 14:32:49.872624 env[1414]: time="2024-12-13T14:32:49.473499906Z" level=warning msg="cleaning up after shim disconnected" id=9db45fac40121283996d4cd6bd76d1c2fd7e5e300a47596ffaf4368e7c591ade namespace=k8s.io Dec 13 14:32:49.872624 env[1414]: time="2024-12-13T14:32:49.473508306Z" level=info msg="cleaning up dead shim" Dec 13 14:32:49.872624 env[1414]: time="2024-12-13T14:32:49.481566766Z" level=warning msg="cleanup warnings time=\"2024-12-13T14:32:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5151 runtime=io.containerd.runc.v2\n" Dec 13 14:32:49.873392 kubelet[2458]: I1213 14:32:49.171031 2458 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Dec 13 14:32:48.532281 systemd[1]: run-containerd-runc-k8s.io-712c356776dbc5d93ac010df3d5eaba59384f8db14ad44b232867b0e07ff03c4-runc.xFu8Et.mount: Deactivated successfully. Dec 13 14:32:48.651771 systemd[1]: cri-containerd-9d6dcf4f3e38c9198571eb5c3017eec686ba0907372bdf402ff60e4184b7420f.scope: Deactivated successfully. Dec 13 14:32:48.707848 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9d6dcf4f3e38c9198571eb5c3017eec686ba0907372bdf402ff60e4184b7420f-rootfs.mount: Deactivated successfully. Dec 13 14:32:49.447345 systemd[1]: cri-containerd-9db45fac40121283996d4cd6bd76d1c2fd7e5e300a47596ffaf4368e7c591ade.scope: Deactivated successfully. Dec 13 14:32:49.471993 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9db45fac40121283996d4cd6bd76d1c2fd7e5e300a47596ffaf4368e7c591ade-rootfs.mount: Deactivated successfully. Dec 13 14:32:49.873326 systemd[1]: cri-containerd-712c356776dbc5d93ac010df3d5eaba59384f8db14ad44b232867b0e07ff03c4.scope: Deactivated successfully. Dec 13 14:32:49.873657 systemd[1]: cri-containerd-712c356776dbc5d93ac010df3d5eaba59384f8db14ad44b232867b0e07ff03c4.scope: Consumed 1.772s CPU time. Dec 13 14:32:49.896733 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-712c356776dbc5d93ac010df3d5eaba59384f8db14ad44b232867b0e07ff03c4-rootfs.mount: Deactivated successfully. Dec 13 14:32:49.898230 env[1414]: time="2024-12-13T14:32:49.898179089Z" level=info msg="shim disconnected" id=712c356776dbc5d93ac010df3d5eaba59384f8db14ad44b232867b0e07ff03c4 Dec 13 14:32:49.898359 env[1414]: time="2024-12-13T14:32:49.898231090Z" level=warning msg="cleaning up after shim disconnected" id=712c356776dbc5d93ac010df3d5eaba59384f8db14ad44b232867b0e07ff03c4 namespace=k8s.io Dec 13 14:32:49.898359 env[1414]: time="2024-12-13T14:32:49.898243190Z" level=info msg="cleaning up dead shim" Dec 13 14:32:49.906390 env[1414]: time="2024-12-13T14:32:49.906335350Z" level=warning msg="cleanup warnings time=\"2024-12-13T14:32:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5175 runtime=io.containerd.runc.v2\n" Dec 13 14:32:53.755405 env[1414]: time="2024-12-13T14:32:53.755315582Z" level=info msg="Kill container \"712c356776dbc5d93ac010df3d5eaba59384f8db14ad44b232867b0e07ff03c4\"" Dec 13 14:33:02.174381 env[1414]: time="2024-12-13T14:33:02.174245302Z" level=error msg="failed to delete shim" error="1 error occurred:\n\t* close wait error: context deadline exceeded\n\n" id=9d6dcf4f3e38c9198571eb5c3017eec686ba0907372bdf402ff60e4184b7420f Dec 13 14:33:02.175379 env[1414]: time="2024-12-13T14:33:02.175048716Z" level=error msg="failed to delete shim" error="1 error occurred:\n\t* close wait error: context deadline exceeded\n\n" id=712c356776dbc5d93ac010df3d5eaba59384f8db14ad44b232867b0e07ff03c4 Dec 13 14:33:02.175849 env[1414]: time="2024-12-13T14:33:02.175107317Z" level=error msg="failed to delete shim" error="1 error occurred:\n\t* close wait error: context deadline exceeded\n\n" id=9db45fac40121283996d4cd6bd76d1c2fd7e5e300a47596ffaf4368e7c591ade Dec 13 14:33:04.589256 env[1414]: time="2024-12-13T14:33:04.589201612Z" level=info msg="StopContainer for \"9d6dcf4f3e38c9198571eb5c3017eec686ba0907372bdf402ff60e4184b7420f\" returns successfully" Dec 13 14:33:04.589892 env[1414]: time="2024-12-13T14:33:04.589851023Z" level=info msg="StopContainer for \"9db45fac40121283996d4cd6bd76d1c2fd7e5e300a47596ffaf4368e7c591ade\" returns successfully" Dec 13 14:33:04.590013 env[1414]: time="2024-12-13T14:33:04.589989125Z" level=info msg="StopContainer for \"712c356776dbc5d93ac010df3d5eaba59384f8db14ad44b232867b0e07ff03c4\" returns successfully" Dec 13 14:33:04.591160 kubelet[2458]: E1213 14:33:04.591126 2458 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="1.308s" Dec 13 14:33:04.592873 env[1414]: time="2024-12-13T14:33:04.592830872Z" level=info msg="StopPodSandbox for \"2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284\"" Dec 13 14:33:04.593109 env[1414]: time="2024-12-13T14:33:04.593073776Z" level=info msg="Container to stop \"9d6dcf4f3e38c9198571eb5c3017eec686ba0907372bdf402ff60e4184b7420f\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Dec 13 14:33:04.597340 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284-shm.mount: Deactivated successfully. Dec 13 14:33:04.600947 env[1414]: time="2024-12-13T14:33:04.600918604Z" level=info msg="StopPodSandbox for \"dec69fb3890cbf52f6b2c749d651817db79183771fd686abfe3d8dd3df856b72\"" Dec 13 14:33:04.601153 env[1414]: time="2024-12-13T14:33:04.601121407Z" level=info msg="Container to stop \"9db45fac40121283996d4cd6bd76d1c2fd7e5e300a47596ffaf4368e7c591ade\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Dec 13 14:33:04.601365 env[1414]: time="2024-12-13T14:33:04.601071906Z" level=info msg="StopPodSandbox for \"20a2c38c124635dc9b01a2156cc8850ddca570a0a82a40705df1a0aa9cff962e\"" Dec 13 14:33:04.604799 env[1414]: time="2024-12-13T14:33:04.601513514Z" level=info msg="Container to stop \"2547bf75cb71cb096b47082a266d08033d1031fa426fe741653b2d3c25dd7250\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Dec 13 14:33:04.604946 env[1414]: time="2024-12-13T14:33:04.604922769Z" level=info msg="Container to stop \"70957cddb0a55520dcaacdf43672588a7b1a302783a6401cbf5da080031c4e8d\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Dec 13 14:33:04.605075 env[1414]: time="2024-12-13T14:33:04.605054071Z" level=info msg="Container to stop \"712c356776dbc5d93ac010df3d5eaba59384f8db14ad44b232867b0e07ff03c4\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Dec 13 14:33:04.606130 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-dec69fb3890cbf52f6b2c749d651817db79183771fd686abfe3d8dd3df856b72-shm.mount: Deactivated successfully. Dec 13 14:33:04.612695 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-20a2c38c124635dc9b01a2156cc8850ddca570a0a82a40705df1a0aa9cff962e-shm.mount: Deactivated successfully. Dec 13 14:33:04.644330 kernel: kauditd_printk_skb: 6 callbacks suppressed Dec 13 14:33:04.644445 kernel: audit: type=1334 audit(1734100384.632:1364): prog-id=116 op=UNLOAD Dec 13 14:33:04.632000 audit: BPF prog-id=116 op=UNLOAD Dec 13 14:33:04.633648 systemd[1]: cri-containerd-dec69fb3890cbf52f6b2c749d651817db79183771fd686abfe3d8dd3df856b72.scope: Deactivated successfully. Dec 13 14:33:04.645000 audit: BPF prog-id=119 op=UNLOAD Dec 13 14:33:04.652599 kernel: audit: type=1334 audit(1734100384.645:1365): prog-id=119 op=UNLOAD Dec 13 14:33:04.657094 systemd[1]: cri-containerd-20a2c38c124635dc9b01a2156cc8850ddca570a0a82a40705df1a0aa9cff962e.scope: Deactivated successfully. Dec 13 14:33:04.655000 audit: BPF prog-id=120 op=UNLOAD Dec 13 14:33:04.664079 systemd[1]: cri-containerd-2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284.scope: Deactivated successfully. Dec 13 14:33:04.664609 kernel: audit: type=1334 audit(1734100384.655:1366): prog-id=120 op=UNLOAD Dec 13 14:33:04.662000 audit: BPF prog-id=164 op=UNLOAD Dec 13 14:33:04.671236 kernel: audit: type=1334 audit(1734100384.662:1367): prog-id=164 op=UNLOAD Dec 13 14:33:04.669000 audit: BPF prog-id=123 op=UNLOAD Dec 13 14:33:04.680554 kernel: audit: type=1334 audit(1734100384.669:1368): prog-id=123 op=UNLOAD Dec 13 14:33:04.671000 audit: BPF prog-id=167 op=UNLOAD Dec 13 14:33:04.686831 kernel: audit: type=1334 audit(1734100384.671:1369): prog-id=167 op=UNLOAD Dec 13 14:33:04.705639 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-dec69fb3890cbf52f6b2c749d651817db79183771fd686abfe3d8dd3df856b72-rootfs.mount: Deactivated successfully. Dec 13 14:33:04.708466 env[1414]: time="2024-12-13T14:33:04.708417661Z" level=info msg="shim disconnected" id=dec69fb3890cbf52f6b2c749d651817db79183771fd686abfe3d8dd3df856b72 Dec 13 14:33:04.708717 env[1414]: time="2024-12-13T14:33:04.708693265Z" level=warning msg="cleaning up after shim disconnected" id=dec69fb3890cbf52f6b2c749d651817db79183771fd686abfe3d8dd3df856b72 namespace=k8s.io Dec 13 14:33:04.708830 env[1414]: time="2024-12-13T14:33:04.708813167Z" level=info msg="cleaning up dead shim" Dec 13 14:33:04.726045 env[1414]: time="2024-12-13T14:33:04.725942847Z" level=warning msg="cleanup warnings time=\"2024-12-13T14:33:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5234 runtime=io.containerd.runc.v2\n" Dec 13 14:33:04.732154 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-20a2c38c124635dc9b01a2156cc8850ddca570a0a82a40705df1a0aa9cff962e-rootfs.mount: Deactivated successfully. Dec 13 14:33:04.734821 env[1414]: time="2024-12-13T14:33:04.734771592Z" level=info msg="shim disconnected" id=20a2c38c124635dc9b01a2156cc8850ddca570a0a82a40705df1a0aa9cff962e Dec 13 14:33:04.735066 env[1414]: time="2024-12-13T14:33:04.735041896Z" level=warning msg="cleaning up after shim disconnected" id=20a2c38c124635dc9b01a2156cc8850ddca570a0a82a40705df1a0aa9cff962e namespace=k8s.io Dec 13 14:33:04.735162 env[1414]: time="2024-12-13T14:33:04.735148098Z" level=info msg="cleaning up dead shim" Dec 13 14:33:04.737735 env[1414]: time="2024-12-13T14:33:04.737697739Z" level=info msg="shim disconnected" id=2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284 Dec 13 14:33:04.738611 env[1414]: time="2024-12-13T14:33:04.737813641Z" level=warning msg="cleaning up after shim disconnected" id=2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284 namespace=k8s.io Dec 13 14:33:04.738611 env[1414]: time="2024-12-13T14:33:04.737828042Z" level=info msg="cleaning up dead shim" Dec 13 14:33:04.748956 env[1414]: time="2024-12-13T14:33:04.748923823Z" level=warning msg="cleanup warnings time=\"2024-12-13T14:33:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5261 runtime=io.containerd.runc.v2\n" Dec 13 14:33:04.749089 env[1414]: time="2024-12-13T14:33:04.748924323Z" level=warning msg="cleanup warnings time=\"2024-12-13T14:33:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5260 runtime=io.containerd.runc.v2\n" Dec 13 14:33:04.757964 env[1414]: time="2024-12-13T14:33:04.757931270Z" level=info msg="TearDown network for sandbox \"dec69fb3890cbf52f6b2c749d651817db79183771fd686abfe3d8dd3df856b72\" successfully" Dec 13 14:33:04.757964 env[1414]: time="2024-12-13T14:33:04.757959971Z" level=info msg="StopPodSandbox for \"dec69fb3890cbf52f6b2c749d651817db79183771fd686abfe3d8dd3df856b72\" returns successfully" Dec 13 14:33:04.764241 env[1414]: time="2024-12-13T14:33:04.764203173Z" level=info msg="TearDown network for sandbox \"20a2c38c124635dc9b01a2156cc8850ddca570a0a82a40705df1a0aa9cff962e\" successfully" Dec 13 14:33:04.764241 env[1414]: time="2024-12-13T14:33:04.764237473Z" level=info msg="StopPodSandbox for \"20a2c38c124635dc9b01a2156cc8850ddca570a0a82a40705df1a0aa9cff962e\" returns successfully" Dec 13 14:33:04.803009 kubelet[2458]: E1213 14:33:04.802972 2458 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="649f0db6-08d0-42df-af8f-bab1b7d4c727" containerName="calico-node" Dec 13 14:33:04.803271 kubelet[2458]: E1213 14:33:04.803255 2458 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="36145a65-f24e-46df-bc41-9855b657accf" containerName="calico-typha" Dec 13 14:33:04.803367 kubelet[2458]: E1213 14:33:04.803356 2458 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="649f0db6-08d0-42df-af8f-bab1b7d4c727" containerName="install-cni" Dec 13 14:33:04.803452 kubelet[2458]: E1213 14:33:04.803433 2458 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="649f0db6-08d0-42df-af8f-bab1b7d4c727" containerName="flexvol-driver" Dec 13 14:33:04.804049 kubelet[2458]: I1213 14:33:04.804028 2458 memory_manager.go:354] "RemoveStaleState removing state" podUID="36145a65-f24e-46df-bc41-9855b657accf" containerName="calico-typha" Dec 13 14:33:04.804205 kubelet[2458]: I1213 14:33:04.804193 2458 memory_manager.go:354] "RemoveStaleState removing state" podUID="649f0db6-08d0-42df-af8f-bab1b7d4c727" containerName="calico-node" Dec 13 14:33:04.810450 systemd[1]: Created slice kubepods-besteffort-pod1a2a01c2_d9e7_443c_9794_ffb44121568b.slice. Dec 13 14:33:04.818000 audit[5306]: NETFILTER_CFG table=filter:125 family=2 entries=9 op=nft_register_rule pid=5306 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:33:04.833642 kernel: audit: type=1325 audit(1734100384.818:1370): table=filter:125 family=2 entries=9 op=nft_register_rule pid=5306 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:33:04.818000 audit[5306]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fff120ea700 a2=0 a3=7fff120ea6ec items=0 ppid=2614 pid=5306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:04.857846 kernel: audit: type=1300 audit(1734100384.818:1370): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fff120ea700 a2=0 a3=7fff120ea6ec items=0 ppid=2614 pid=5306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:04.818000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:33:04.878315 kubelet[2458]: I1213 14:33:04.878279 2458 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-policysync\") pod \"649f0db6-08d0-42df-af8f-bab1b7d4c727\" (UID: \"649f0db6-08d0-42df-af8f-bab1b7d4c727\") " Dec 13 14:33:04.878472 kubelet[2458]: I1213 14:33:04.878337 2458 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/36145a65-f24e-46df-bc41-9855b657accf-tigera-ca-bundle\") pod \"36145a65-f24e-46df-bc41-9855b657accf\" (UID: \"36145a65-f24e-46df-bc41-9855b657accf\") " Dec 13 14:33:04.878472 kubelet[2458]: I1213 14:33:04.878365 2458 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-xvb2w\" (UniqueName: \"kubernetes.io/projected/36145a65-f24e-46df-bc41-9855b657accf-kube-api-access-xvb2w\") pod \"36145a65-f24e-46df-bc41-9855b657accf\" (UID: \"36145a65-f24e-46df-bc41-9855b657accf\") " Dec 13 14:33:04.878472 kubelet[2458]: I1213 14:33:04.878390 2458 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-var-lib-calico\") pod \"649f0db6-08d0-42df-af8f-bab1b7d4c727\" (UID: \"649f0db6-08d0-42df-af8f-bab1b7d4c727\") " Dec 13 14:33:04.878472 kubelet[2458]: I1213 14:33:04.878413 2458 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-pvrk6\" (UniqueName: \"kubernetes.io/projected/649f0db6-08d0-42df-af8f-bab1b7d4c727-kube-api-access-pvrk6\") pod \"649f0db6-08d0-42df-af8f-bab1b7d4c727\" (UID: \"649f0db6-08d0-42df-af8f-bab1b7d4c727\") " Dec 13 14:33:04.878472 kubelet[2458]: I1213 14:33:04.878435 2458 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-cni-bin-dir\") pod \"649f0db6-08d0-42df-af8f-bab1b7d4c727\" (UID: \"649f0db6-08d0-42df-af8f-bab1b7d4c727\") " Dec 13 14:33:04.878472 kubelet[2458]: I1213 14:33:04.878455 2458 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/649f0db6-08d0-42df-af8f-bab1b7d4c727-node-certs\") pod \"649f0db6-08d0-42df-af8f-bab1b7d4c727\" (UID: \"649f0db6-08d0-42df-af8f-bab1b7d4c727\") " Dec 13 14:33:04.878760 kernel: audit: type=1327 audit(1734100384.818:1370): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:33:04.878808 kubelet[2458]: I1213 14:33:04.878473 2458 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-cni-net-dir\") pod \"649f0db6-08d0-42df-af8f-bab1b7d4c727\" (UID: \"649f0db6-08d0-42df-af8f-bab1b7d4c727\") " Dec 13 14:33:04.878808 kubelet[2458]: I1213 14:33:04.878497 2458 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-xtables-lock\") pod \"649f0db6-08d0-42df-af8f-bab1b7d4c727\" (UID: \"649f0db6-08d0-42df-af8f-bab1b7d4c727\") " Dec 13 14:33:04.878808 kubelet[2458]: I1213 14:33:04.878519 2458 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-flexvol-driver-host\") pod \"649f0db6-08d0-42df-af8f-bab1b7d4c727\" (UID: \"649f0db6-08d0-42df-af8f-bab1b7d4c727\") " Dec 13 14:33:04.878808 kubelet[2458]: I1213 14:33:04.878731 2458 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/649f0db6-08d0-42df-af8f-bab1b7d4c727-tigera-ca-bundle\") pod \"649f0db6-08d0-42df-af8f-bab1b7d4c727\" (UID: \"649f0db6-08d0-42df-af8f-bab1b7d4c727\") " Dec 13 14:33:04.878978 kubelet[2458]: I1213 14:33:04.878815 2458 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-var-run-calico\") pod \"649f0db6-08d0-42df-af8f-bab1b7d4c727\" (UID: \"649f0db6-08d0-42df-af8f-bab1b7d4c727\") " Dec 13 14:33:04.878978 kubelet[2458]: I1213 14:33:04.878848 2458 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/36145a65-f24e-46df-bc41-9855b657accf-typha-certs\") pod \"36145a65-f24e-46df-bc41-9855b657accf\" (UID: \"36145a65-f24e-46df-bc41-9855b657accf\") " Dec 13 14:33:04.878978 kubelet[2458]: I1213 14:33:04.878893 2458 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-cni-log-dir\") pod \"649f0db6-08d0-42df-af8f-bab1b7d4c727\" (UID: \"649f0db6-08d0-42df-af8f-bab1b7d4c727\") " Dec 13 14:33:04.878978 kubelet[2458]: I1213 14:33:04.878917 2458 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-lib-modules\") pod \"649f0db6-08d0-42df-af8f-bab1b7d4c727\" (UID: \"649f0db6-08d0-42df-af8f-bab1b7d4c727\") " Dec 13 14:33:04.879137 kubelet[2458]: I1213 14:33:04.879008 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dz48v\" (UniqueName: \"kubernetes.io/projected/1a2a01c2-d9e7-443c-9794-ffb44121568b-kube-api-access-dz48v\") pod \"calico-typha-7d988f8d6b-mdk2g\" (UID: \"1a2a01c2-d9e7-443c-9794-ffb44121568b\") " pod="calico-system/calico-typha-7d988f8d6b-mdk2g" Dec 13 14:33:04.879137 kubelet[2458]: I1213 14:33:04.879041 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1a2a01c2-d9e7-443c-9794-ffb44121568b-tigera-ca-bundle\") pod \"calico-typha-7d988f8d6b-mdk2g\" (UID: \"1a2a01c2-d9e7-443c-9794-ffb44121568b\") " pod="calico-system/calico-typha-7d988f8d6b-mdk2g" Dec 13 14:33:04.879137 kubelet[2458]: I1213 14:33:04.879082 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/1a2a01c2-d9e7-443c-9794-ffb44121568b-typha-certs\") pod \"calico-typha-7d988f8d6b-mdk2g\" (UID: \"1a2a01c2-d9e7-443c-9794-ffb44121568b\") " pod="calico-system/calico-typha-7d988f8d6b-mdk2g" Dec 13 14:33:04.879262 kubelet[2458]: I1213 14:33:04.879173 2458 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-policysync" (OuterVolumeSpecName: "policysync") pod "649f0db6-08d0-42df-af8f-bab1b7d4c727" (UID: "649f0db6-08d0-42df-af8f-bab1b7d4c727"). InnerVolumeSpecName "policysync". PluginName "kubernetes.io/host-path", VolumeGidValue "" Dec 13 14:33:04.881568 kubelet[2458]: I1213 14:33:04.879345 2458 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-flexvol-driver-host" (OuterVolumeSpecName: "flexvol-driver-host") pod "649f0db6-08d0-42df-af8f-bab1b7d4c727" (UID: "649f0db6-08d0-42df-af8f-bab1b7d4c727"). InnerVolumeSpecName "flexvol-driver-host". PluginName "kubernetes.io/host-path", VolumeGidValue "" Dec 13 14:33:04.844000 audit[5306]: NETFILTER_CFG table=nat:126 family=2 entries=27 op=nft_unregister_chain pid=5306 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:33:04.892944 kubelet[2458]: I1213 14:33:04.892908 2458 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-var-lib-calico" (OuterVolumeSpecName: "var-lib-calico") pod "649f0db6-08d0-42df-af8f-bab1b7d4c727" (UID: "649f0db6-08d0-42df-af8f-bab1b7d4c727"). InnerVolumeSpecName "var-lib-calico". PluginName "kubernetes.io/host-path", VolumeGidValue "" Dec 13 14:33:04.893573 kernel: audit: type=1325 audit(1734100384.844:1371): table=nat:126 family=2 entries=27 op=nft_unregister_chain pid=5306 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:33:04.894378 kubelet[2458]: I1213 14:33:04.894352 2458 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-cni-bin-dir" (OuterVolumeSpecName: "cni-bin-dir") pod "649f0db6-08d0-42df-af8f-bab1b7d4c727" (UID: "649f0db6-08d0-42df-af8f-bab1b7d4c727"). InnerVolumeSpecName "cni-bin-dir". PluginName "kubernetes.io/host-path", VolumeGidValue "" Dec 13 14:33:04.895298 kubelet[2458]: I1213 14:33:04.895274 2458 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-var-run-calico" (OuterVolumeSpecName: "var-run-calico") pod "649f0db6-08d0-42df-af8f-bab1b7d4c727" (UID: "649f0db6-08d0-42df-af8f-bab1b7d4c727"). InnerVolumeSpecName "var-run-calico". PluginName "kubernetes.io/host-path", VolumeGidValue "" Dec 13 14:33:04.844000 audit[5306]: SYSCALL arch=c000003e syscall=46 success=yes exit=6028 a0=3 a1=7fff120ea700 a2=0 a3=7fff120ea6ec items=0 ppid=2614 pid=5306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:04.844000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:33:04.902987 kubelet[2458]: I1213 14:33:04.902961 2458 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-cni-net-dir" (OuterVolumeSpecName: "cni-net-dir") pod "649f0db6-08d0-42df-af8f-bab1b7d4c727" (UID: "649f0db6-08d0-42df-af8f-bab1b7d4c727"). InnerVolumeSpecName "cni-net-dir". PluginName "kubernetes.io/host-path", VolumeGidValue "" Dec 13 14:33:04.903171 kubelet[2458]: I1213 14:33:04.903148 2458 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "649f0db6-08d0-42df-af8f-bab1b7d4c727" (UID: "649f0db6-08d0-42df-af8f-bab1b7d4c727"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Dec 13 14:33:04.907239 kubelet[2458]: I1213 14:33:04.907210 2458 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/36145a65-f24e-46df-bc41-9855b657accf-kube-api-access-xvb2w" (OuterVolumeSpecName: "kube-api-access-xvb2w") pod "36145a65-f24e-46df-bc41-9855b657accf" (UID: "36145a65-f24e-46df-bc41-9855b657accf"). InnerVolumeSpecName "kube-api-access-xvb2w". PluginName "kubernetes.io/projected", VolumeGidValue "" Dec 13 14:33:04.908199 kubelet[2458]: I1213 14:33:04.908175 2458 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/36145a65-f24e-46df-bc41-9855b657accf-tigera-ca-bundle" (OuterVolumeSpecName: "tigera-ca-bundle") pod "36145a65-f24e-46df-bc41-9855b657accf" (UID: "36145a65-f24e-46df-bc41-9855b657accf"). InnerVolumeSpecName "tigera-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Dec 13 14:33:04.912564 systemd[1]: Created slice kubepods-besteffort-pod7910e6e1_771c_40e8_bbea_80b8f2dd2e53.slice. Dec 13 14:33:04.918639 kubelet[2458]: I1213 14:33:04.915200 2458 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "649f0db6-08d0-42df-af8f-bab1b7d4c727" (UID: "649f0db6-08d0-42df-af8f-bab1b7d4c727"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Dec 13 14:33:04.919025 kubelet[2458]: I1213 14:33:04.918988 2458 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-cni-log-dir" (OuterVolumeSpecName: "cni-log-dir") pod "649f0db6-08d0-42df-af8f-bab1b7d4c727" (UID: "649f0db6-08d0-42df-af8f-bab1b7d4c727"). InnerVolumeSpecName "cni-log-dir". PluginName "kubernetes.io/host-path", VolumeGidValue "" Dec 13 14:33:04.920552 systemd-networkd[1577]: calicb7f7d8050a: Link DOWN Dec 13 14:33:04.920560 systemd-networkd[1577]: calicb7f7d8050a: Lost carrier Dec 13 14:33:04.943567 kubelet[2458]: I1213 14:33:04.943479 2458 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/649f0db6-08d0-42df-af8f-bab1b7d4c727-kube-api-access-pvrk6" (OuterVolumeSpecName: "kube-api-access-pvrk6") pod "649f0db6-08d0-42df-af8f-bab1b7d4c727" (UID: "649f0db6-08d0-42df-af8f-bab1b7d4c727"). InnerVolumeSpecName "kube-api-access-pvrk6". PluginName "kubernetes.io/projected", VolumeGidValue "" Dec 13 14:33:04.948280 kubelet[2458]: I1213 14:33:04.948234 2458 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/649f0db6-08d0-42df-af8f-bab1b7d4c727-tigera-ca-bundle" (OuterVolumeSpecName: "tigera-ca-bundle") pod "649f0db6-08d0-42df-af8f-bab1b7d4c727" (UID: "649f0db6-08d0-42df-af8f-bab1b7d4c727"). InnerVolumeSpecName "tigera-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Dec 13 14:33:04.948423 kubelet[2458]: I1213 14:33:04.948388 2458 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/36145a65-f24e-46df-bc41-9855b657accf-typha-certs" (OuterVolumeSpecName: "typha-certs") pod "36145a65-f24e-46df-bc41-9855b657accf" (UID: "36145a65-f24e-46df-bc41-9855b657accf"). InnerVolumeSpecName "typha-certs". PluginName "kubernetes.io/secret", VolumeGidValue "" Dec 13 14:33:04.951682 kubelet[2458]: I1213 14:33:04.951658 2458 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/649f0db6-08d0-42df-af8f-bab1b7d4c727-node-certs" (OuterVolumeSpecName: "node-certs") pod "649f0db6-08d0-42df-af8f-bab1b7d4c727" (UID: "649f0db6-08d0-42df-af8f-bab1b7d4c727"). InnerVolumeSpecName "node-certs". PluginName "kubernetes.io/secret", VolumeGidValue "" Dec 13 14:33:04.963000 audit[5322]: NETFILTER_CFG table=filter:127 family=2 entries=10 op=nft_register_rule pid=5322 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:33:04.963000 audit[5322]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffc92ce6430 a2=0 a3=7ffc92ce641c items=0 ppid=2614 pid=5322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:04.963000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:33:04.968000 audit[5322]: NETFILTER_CFG table=nat:128 family=2 entries=20 op=nft_register_rule pid=5322 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:33:04.968000 audit[5322]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffc92ce6430 a2=0 a3=7ffc92ce641c items=0 ppid=2614 pid=5322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:04.968000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:33:04.980883 kubelet[2458]: I1213 14:33:04.979808 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/7910e6e1-771c-40e8-bbea-80b8f2dd2e53-cni-bin-dir\") pod \"calico-node-jf9pt\" (UID: \"7910e6e1-771c-40e8-bbea-80b8f2dd2e53\") " pod="calico-system/calico-node-jf9pt" Dec 13 14:33:04.980883 kubelet[2458]: I1213 14:33:04.979856 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/7910e6e1-771c-40e8-bbea-80b8f2dd2e53-xtables-lock\") pod \"calico-node-jf9pt\" (UID: \"7910e6e1-771c-40e8-bbea-80b8f2dd2e53\") " pod="calico-system/calico-node-jf9pt" Dec 13 14:33:04.980883 kubelet[2458]: I1213 14:33:04.979878 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/7910e6e1-771c-40e8-bbea-80b8f2dd2e53-var-run-calico\") pod \"calico-node-jf9pt\" (UID: \"7910e6e1-771c-40e8-bbea-80b8f2dd2e53\") " pod="calico-system/calico-node-jf9pt" Dec 13 14:33:04.980883 kubelet[2458]: I1213 14:33:04.979923 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/7910e6e1-771c-40e8-bbea-80b8f2dd2e53-policysync\") pod \"calico-node-jf9pt\" (UID: \"7910e6e1-771c-40e8-bbea-80b8f2dd2e53\") " pod="calico-system/calico-node-jf9pt" Dec 13 14:33:04.980883 kubelet[2458]: I1213 14:33:04.979942 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/7910e6e1-771c-40e8-bbea-80b8f2dd2e53-cni-net-dir\") pod \"calico-node-jf9pt\" (UID: \"7910e6e1-771c-40e8-bbea-80b8f2dd2e53\") " pod="calico-system/calico-node-jf9pt" Dec 13 14:33:04.981190 kubelet[2458]: I1213 14:33:04.979963 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/7910e6e1-771c-40e8-bbea-80b8f2dd2e53-flexvol-driver-host\") pod \"calico-node-jf9pt\" (UID: \"7910e6e1-771c-40e8-bbea-80b8f2dd2e53\") " pod="calico-system/calico-node-jf9pt" Dec 13 14:33:04.981190 kubelet[2458]: I1213 14:33:04.979998 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zvlrj\" (UniqueName: \"kubernetes.io/projected/7910e6e1-771c-40e8-bbea-80b8f2dd2e53-kube-api-access-zvlrj\") pod \"calico-node-jf9pt\" (UID: \"7910e6e1-771c-40e8-bbea-80b8f2dd2e53\") " pod="calico-system/calico-node-jf9pt" Dec 13 14:33:04.981190 kubelet[2458]: I1213 14:33:04.980036 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/7910e6e1-771c-40e8-bbea-80b8f2dd2e53-lib-modules\") pod \"calico-node-jf9pt\" (UID: \"7910e6e1-771c-40e8-bbea-80b8f2dd2e53\") " pod="calico-system/calico-node-jf9pt" Dec 13 14:33:04.981190 kubelet[2458]: I1213 14:33:04.980059 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/7910e6e1-771c-40e8-bbea-80b8f2dd2e53-cni-log-dir\") pod \"calico-node-jf9pt\" (UID: \"7910e6e1-771c-40e8-bbea-80b8f2dd2e53\") " pod="calico-system/calico-node-jf9pt" Dec 13 14:33:04.981190 kubelet[2458]: I1213 14:33:04.980085 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/7910e6e1-771c-40e8-bbea-80b8f2dd2e53-node-certs\") pod \"calico-node-jf9pt\" (UID: \"7910e6e1-771c-40e8-bbea-80b8f2dd2e53\") " pod="calico-system/calico-node-jf9pt" Dec 13 14:33:04.981429 kubelet[2458]: I1213 14:33:04.980108 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/7910e6e1-771c-40e8-bbea-80b8f2dd2e53-tigera-ca-bundle\") pod \"calico-node-jf9pt\" (UID: \"7910e6e1-771c-40e8-bbea-80b8f2dd2e53\") " pod="calico-system/calico-node-jf9pt" Dec 13 14:33:04.981429 kubelet[2458]: I1213 14:33:04.980132 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/7910e6e1-771c-40e8-bbea-80b8f2dd2e53-var-lib-calico\") pod \"calico-node-jf9pt\" (UID: \"7910e6e1-771c-40e8-bbea-80b8f2dd2e53\") " pod="calico-system/calico-node-jf9pt" Dec 13 14:33:04.981429 kubelet[2458]: I1213 14:33:04.980170 2458 reconciler_common.go:288] "Volume detached for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/36145a65-f24e-46df-bc41-9855b657accf-typha-certs\") on node \"ci-3510.3.6-a-f6adf0345d\" DevicePath \"\"" Dec 13 14:33:04.981429 kubelet[2458]: I1213 14:33:04.980184 2458 reconciler_common.go:288] "Volume detached for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-cni-log-dir\") on node \"ci-3510.3.6-a-f6adf0345d\" DevicePath \"\"" Dec 13 14:33:04.981429 kubelet[2458]: I1213 14:33:04.980196 2458 reconciler_common.go:288] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-lib-modules\") on node \"ci-3510.3.6-a-f6adf0345d\" DevicePath \"\"" Dec 13 14:33:04.981429 kubelet[2458]: I1213 14:33:04.980208 2458 reconciler_common.go:288] "Volume detached for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-policysync\") on node \"ci-3510.3.6-a-f6adf0345d\" DevicePath \"\"" Dec 13 14:33:04.981429 kubelet[2458]: I1213 14:33:04.980220 2458 reconciler_common.go:288] "Volume detached for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/36145a65-f24e-46df-bc41-9855b657accf-tigera-ca-bundle\") on node \"ci-3510.3.6-a-f6adf0345d\" DevicePath \"\"" Dec 13 14:33:04.981779 kubelet[2458]: I1213 14:33:04.980233 2458 reconciler_common.go:288] "Volume detached for volume \"kube-api-access-xvb2w\" (UniqueName: \"kubernetes.io/projected/36145a65-f24e-46df-bc41-9855b657accf-kube-api-access-xvb2w\") on node \"ci-3510.3.6-a-f6adf0345d\" DevicePath \"\"" Dec 13 14:33:04.981779 kubelet[2458]: I1213 14:33:04.980247 2458 reconciler_common.go:288] "Volume detached for volume \"kube-api-access-pvrk6\" (UniqueName: \"kubernetes.io/projected/649f0db6-08d0-42df-af8f-bab1b7d4c727-kube-api-access-pvrk6\") on node \"ci-3510.3.6-a-f6adf0345d\" DevicePath \"\"" Dec 13 14:33:04.981779 kubelet[2458]: I1213 14:33:04.980260 2458 reconciler_common.go:288] "Volume detached for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-var-lib-calico\") on node \"ci-3510.3.6-a-f6adf0345d\" DevicePath \"\"" Dec 13 14:33:04.981779 kubelet[2458]: I1213 14:33:04.980272 2458 reconciler_common.go:288] "Volume detached for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-cni-bin-dir\") on node \"ci-3510.3.6-a-f6adf0345d\" DevicePath \"\"" Dec 13 14:33:04.981779 kubelet[2458]: I1213 14:33:04.980283 2458 reconciler_common.go:288] "Volume detached for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/649f0db6-08d0-42df-af8f-bab1b7d4c727-node-certs\") on node \"ci-3510.3.6-a-f6adf0345d\" DevicePath \"\"" Dec 13 14:33:04.981779 kubelet[2458]: I1213 14:33:04.980295 2458 reconciler_common.go:288] "Volume detached for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-cni-net-dir\") on node \"ci-3510.3.6-a-f6adf0345d\" DevicePath \"\"" Dec 13 14:33:04.981779 kubelet[2458]: I1213 14:33:04.980308 2458 reconciler_common.go:288] "Volume detached for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-flexvol-driver-host\") on node \"ci-3510.3.6-a-f6adf0345d\" DevicePath \"\"" Dec 13 14:33:04.981779 kubelet[2458]: I1213 14:33:04.980321 2458 reconciler_common.go:288] "Volume detached for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/649f0db6-08d0-42df-af8f-bab1b7d4c727-tigera-ca-bundle\") on node \"ci-3510.3.6-a-f6adf0345d\" DevicePath \"\"" Dec 13 14:33:04.982104 kubelet[2458]: I1213 14:33:04.980334 2458 reconciler_common.go:288] "Volume detached for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-var-run-calico\") on node \"ci-3510.3.6-a-f6adf0345d\" DevicePath \"\"" Dec 13 14:33:04.982104 kubelet[2458]: I1213 14:33:04.980345 2458 reconciler_common.go:288] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/649f0db6-08d0-42df-af8f-bab1b7d4c727-xtables-lock\") on node \"ci-3510.3.6-a-f6adf0345d\" DevicePath \"\"" Dec 13 14:33:05.027409 env[1414]: 2024-12-13 14:33:04.918 [INFO][5301] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Dec 13 14:33:05.027409 env[1414]: 2024-12-13 14:33:04.919 [INFO][5301] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" iface="eth0" netns="/var/run/netns/cni-86dff023-5c3f-34f8-62d3-cc6b75224a33" Dec 13 14:33:05.027409 env[1414]: 2024-12-13 14:33:04.919 [INFO][5301] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" iface="eth0" netns="/var/run/netns/cni-86dff023-5c3f-34f8-62d3-cc6b75224a33" Dec 13 14:33:05.027409 env[1414]: 2024-12-13 14:33:04.942 [INFO][5301] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" after=23.667787ms iface="eth0" netns="/var/run/netns/cni-86dff023-5c3f-34f8-62d3-cc6b75224a33" Dec 13 14:33:05.027409 env[1414]: 2024-12-13 14:33:04.942 [INFO][5301] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Dec 13 14:33:05.027409 env[1414]: 2024-12-13 14:33:04.943 [INFO][5301] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Dec 13 14:33:05.027409 env[1414]: 2024-12-13 14:33:04.978 [INFO][5318] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" HandleID="k8s-pod-network.2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" Dec 13 14:33:05.027409 env[1414]: 2024-12-13 14:33:04.978 [INFO][5318] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 14:33:05.027409 env[1414]: 2024-12-13 14:33:04.978 [INFO][5318] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 14:33:05.027409 env[1414]: 2024-12-13 14:33:05.023 [INFO][5318] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" HandleID="k8s-pod-network.2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" Dec 13 14:33:05.027409 env[1414]: 2024-12-13 14:33:05.024 [INFO][5318] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" HandleID="k8s-pod-network.2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" Dec 13 14:33:05.027409 env[1414]: 2024-12-13 14:33:05.025 [INFO][5318] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 14:33:05.027409 env[1414]: 2024-12-13 14:33:05.026 [INFO][5301] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Dec 13 14:33:05.028208 env[1414]: time="2024-12-13T14:33:05.028161581Z" level=info msg="TearDown network for sandbox \"2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284\" successfully" Dec 13 14:33:05.028316 env[1414]: time="2024-12-13T14:33:05.028298184Z" level=info msg="StopPodSandbox for \"2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284\" returns successfully" Dec 13 14:33:05.081104 kubelet[2458]: I1213 14:33:05.081060 2458 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-2n4hb\" (UniqueName: \"kubernetes.io/projected/6fc9dd3b-fe61-4b81-8279-1d36298429b2-kube-api-access-2n4hb\") pod \"6fc9dd3b-fe61-4b81-8279-1d36298429b2\" (UID: \"6fc9dd3b-fe61-4b81-8279-1d36298429b2\") " Dec 13 14:33:05.081410 kubelet[2458]: I1213 14:33:05.081383 2458 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/6fc9dd3b-fe61-4b81-8279-1d36298429b2-tigera-ca-bundle\") pod \"6fc9dd3b-fe61-4b81-8279-1d36298429b2\" (UID: \"6fc9dd3b-fe61-4b81-8279-1d36298429b2\") " Dec 13 14:33:05.086827 kubelet[2458]: I1213 14:33:05.086796 2458 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/6fc9dd3b-fe61-4b81-8279-1d36298429b2-kube-api-access-2n4hb" (OuterVolumeSpecName: "kube-api-access-2n4hb") pod "6fc9dd3b-fe61-4b81-8279-1d36298429b2" (UID: "6fc9dd3b-fe61-4b81-8279-1d36298429b2"). InnerVolumeSpecName "kube-api-access-2n4hb". PluginName "kubernetes.io/projected", VolumeGidValue "" Dec 13 14:33:05.094329 kubelet[2458]: I1213 14:33:05.094295 2458 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/6fc9dd3b-fe61-4b81-8279-1d36298429b2-tigera-ca-bundle" (OuterVolumeSpecName: "tigera-ca-bundle") pod "6fc9dd3b-fe61-4b81-8279-1d36298429b2" (UID: "6fc9dd3b-fe61-4b81-8279-1d36298429b2"). InnerVolumeSpecName "tigera-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Dec 13 14:33:05.114619 env[1414]: time="2024-12-13T14:33:05.114162570Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-7d988f8d6b-mdk2g,Uid:1a2a01c2-d9e7-443c-9794-ffb44121568b,Namespace:calico-system,Attempt:0,}" Dec 13 14:33:05.150525 env[1414]: time="2024-12-13T14:33:05.150424455Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Dec 13 14:33:05.150770 env[1414]: time="2024-12-13T14:33:05.150491757Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Dec 13 14:33:05.150770 env[1414]: time="2024-12-13T14:33:05.150505457Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Dec 13 14:33:05.150770 env[1414]: time="2024-12-13T14:33:05.150736460Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d37147096be09e58f9ef07aba555df88722f1821ba05d8416e7863dbd264037d pid=5340 runtime=io.containerd.runc.v2 Dec 13 14:33:05.164820 systemd[1]: Started cri-containerd-d37147096be09e58f9ef07aba555df88722f1821ba05d8416e7863dbd264037d.scope. Dec 13 14:33:05.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.177000 audit: BPF prog-id=206 op=LOAD Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { bpf } for pid=5350 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit[5350]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=5340 pid=5350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:05.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433373134373039366265303965353866396566303761626135353564 Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit[5350]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=5340 pid=5350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:05.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433373134373039366265303965353866396566303761626135353564 Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { bpf } for pid=5350 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { bpf } for pid=5350 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { bpf } for pid=5350 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { bpf } for pid=5350 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { bpf } for pid=5350 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit: BPF prog-id=207 op=LOAD Dec 13 14:33:05.178000 audit[5350]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0001d0ea0 items=0 ppid=5340 pid=5350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:05.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433373134373039366265303965353866396566303761626135353564 Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { bpf } for pid=5350 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { bpf } for pid=5350 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { bpf } for pid=5350 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { bpf } for pid=5350 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit: BPF prog-id=208 op=LOAD Dec 13 14:33:05.178000 audit[5350]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0001d0ee8 items=0 ppid=5340 pid=5350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:05.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433373134373039366265303965353866396566303761626135353564 Dec 13 14:33:05.178000 audit: BPF prog-id=208 op=UNLOAD Dec 13 14:33:05.178000 audit: BPF prog-id=207 op=UNLOAD Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { bpf } for pid=5350 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { bpf } for pid=5350 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { bpf } for pid=5350 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { perfmon } for pid=5350 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { bpf } for pid=5350 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit[5350]: AVC avc: denied { bpf } for pid=5350 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.178000 audit: BPF prog-id=209 op=LOAD Dec 13 14:33:05.178000 audit[5350]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0001d12f8 items=0 ppid=5340 pid=5350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:05.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433373134373039366265303965353866396566303761626135353564 Dec 13 14:33:05.182970 kubelet[2458]: I1213 14:33:05.182157 2458 reconciler_common.go:288] "Volume detached for volume \"kube-api-access-2n4hb\" (UniqueName: \"kubernetes.io/projected/6fc9dd3b-fe61-4b81-8279-1d36298429b2-kube-api-access-2n4hb\") on node \"ci-3510.3.6-a-f6adf0345d\" DevicePath \"\"" Dec 13 14:33:05.182970 kubelet[2458]: I1213 14:33:05.182190 2458 reconciler_common.go:288] "Volume detached for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/6fc9dd3b-fe61-4b81-8279-1d36298429b2-tigera-ca-bundle\") on node \"ci-3510.3.6-a-f6adf0345d\" DevicePath \"\"" Dec 13 14:33:05.208397 env[1414]: time="2024-12-13T14:33:05.208356191Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-7d988f8d6b-mdk2g,Uid:1a2a01c2-d9e7-443c-9794-ffb44121568b,Namespace:calico-system,Attempt:0,} returns sandbox id \"d37147096be09e58f9ef07aba555df88722f1821ba05d8416e7863dbd264037d\"" Dec 13 14:33:05.215927 env[1414]: time="2024-12-13T14:33:05.215874712Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-jf9pt,Uid:7910e6e1-771c-40e8-bbea-80b8f2dd2e53,Namespace:calico-system,Attempt:0,}" Dec 13 14:33:05.218776 env[1414]: time="2024-12-13T14:33:05.218744758Z" level=info msg="CreateContainer within sandbox \"d37147096be09e58f9ef07aba555df88722f1821ba05d8416e7863dbd264037d\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Dec 13 14:33:05.268693 env[1414]: time="2024-12-13T14:33:05.268238258Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Dec 13 14:33:05.268693 env[1414]: time="2024-12-13T14:33:05.268277158Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Dec 13 14:33:05.268693 env[1414]: time="2024-12-13T14:33:05.268287058Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Dec 13 14:33:05.268693 env[1414]: time="2024-12-13T14:33:05.268410160Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3593de77b9f29f91b793e92bbd9b309f3db445e8404130aa97ddf0a5f2c78c46 pid=5382 runtime=io.containerd.runc.v2 Dec 13 14:33:05.269870 env[1414]: time="2024-12-13T14:33:05.269817483Z" level=info msg="CreateContainer within sandbox \"d37147096be09e58f9ef07aba555df88722f1821ba05d8416e7863dbd264037d\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"4cc4fb423b861ef0e5aedd27d775d77c82c8bba51016398086f3dc97ce09f01f\"" Dec 13 14:33:05.270737 env[1414]: time="2024-12-13T14:33:05.270704097Z" level=info msg="StartContainer for \"4cc4fb423b861ef0e5aedd27d775d77c82c8bba51016398086f3dc97ce09f01f\"" Dec 13 14:33:05.291738 systemd[1]: Started cri-containerd-3593de77b9f29f91b793e92bbd9b309f3db445e8404130aa97ddf0a5f2c78c46.scope. Dec 13 14:33:05.297618 systemd[1]: Removed slice kubepods-besteffort-pod6fc9dd3b_fe61_4b81_8279_1d36298429b2.slice. Dec 13 14:33:05.308920 systemd[1]: Removed slice kubepods-besteffort-pod36145a65_f24e_46df_bc41_9855b657accf.slice. Dec 13 14:33:05.312450 systemd[1]: Removed slice kubepods-besteffort-pod649f0db6_08d0_42df_af8f_bab1b7d4c727.slice. Dec 13 14:33:05.312616 systemd[1]: kubepods-besteffort-pod649f0db6_08d0_42df_af8f_bab1b7d4c727.slice: Consumed 2.281s CPU time. Dec 13 14:33:05.322378 systemd[1]: Started cri-containerd-4cc4fb423b861ef0e5aedd27d775d77c82c8bba51016398086f3dc97ce09f01f.scope. Dec 13 14:33:05.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.328000 audit: BPF prog-id=210 op=LOAD Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit[5395]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=5382 pid=5395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:05.329000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335393364653737623966323966393162373933653932626264396233 Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit[5395]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=5382 pid=5395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:05.329000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335393364653737623966323966393162373933653932626264396233 Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit: BPF prog-id=211 op=LOAD Dec 13 14:33:05.329000 audit[5395]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0002972e0 items=0 ppid=5382 pid=5395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:05.329000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335393364653737623966323966393162373933653932626264396233 Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit: BPF prog-id=212 op=LOAD Dec 13 14:33:05.329000 audit[5395]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000297328 items=0 ppid=5382 pid=5395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:05.329000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335393364653737623966323966393162373933653932626264396233 Dec 13 14:33:05.329000 audit: BPF prog-id=212 op=UNLOAD Dec 13 14:33:05.329000 audit: BPF prog-id=211 op=UNLOAD Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { perfmon } for pid=5395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit[5395]: AVC avc: denied { bpf } for pid=5395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.329000 audit: BPF prog-id=213 op=LOAD Dec 13 14:33:05.329000 audit[5395]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000297738 items=0 ppid=5382 pid=5395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:05.329000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335393364653737623966323966393162373933653932626264396233 Dec 13 14:33:05.349760 env[1414]: time="2024-12-13T14:33:05.349717773Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-jf9pt,Uid:7910e6e1-771c-40e8-bbea-80b8f2dd2e53,Namespace:calico-system,Attempt:0,} returns sandbox id \"3593de77b9f29f91b793e92bbd9b309f3db445e8404130aa97ddf0a5f2c78c46\"" Dec 13 14:33:05.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.354000 audit: BPF prog-id=214 op=LOAD Dec 13 14:33:05.357395 env[1414]: time="2024-12-13T14:33:05.357356696Z" level=info msg="CreateContainer within sandbox \"3593de77b9f29f91b793e92bbd9b309f3db445e8404130aa97ddf0a5f2c78c46\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Dec 13 14:33:05.355000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.355000 audit[5405]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=5340 pid=5405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:05.355000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463633466623432336238363165663065356165646432376437373564 Dec 13 14:33:05.355000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.355000 audit[5405]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=5340 pid=5405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:05.355000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463633466623432336238363165663065356165646432376437373564 Dec 13 14:33:05.356000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.356000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.356000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.356000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.356000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.356000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.356000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.356000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.356000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.356000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.356000 audit: BPF prog-id=215 op=LOAD Dec 13 14:33:05.356000 audit[5405]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00027bdc0 items=0 ppid=5340 pid=5405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:05.356000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463633466623432336238363165663065356165646432376437373564 Dec 13 14:33:05.356000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.356000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.356000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.356000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.356000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.356000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.356000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.356000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.356000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.356000 audit: BPF prog-id=216 op=LOAD Dec 13 14:33:05.356000 audit[5405]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00027be08 items=0 ppid=5340 pid=5405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:05.356000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463633466623432336238363165663065356165646432376437373564 Dec 13 14:33:05.356000 audit: BPF prog-id=216 op=UNLOAD Dec 13 14:33:05.356000 audit: BPF prog-id=215 op=UNLOAD Dec 13 14:33:05.356000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.356000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.356000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.356000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.356000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.356000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.356000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.356000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.356000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.356000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.356000 audit: BPF prog-id=217 op=LOAD Dec 13 14:33:05.356000 audit[5405]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003d6218 items=0 ppid=5340 pid=5405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:05.356000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463633466623432336238363165663065356165646432376437373564 Dec 13 14:33:05.405050 env[1414]: time="2024-12-13T14:33:05.399804082Z" level=info msg="StartContainer for \"4cc4fb423b861ef0e5aedd27d775d77c82c8bba51016398086f3dc97ce09f01f\" returns successfully" Dec 13 14:33:05.415571 env[1414]: time="2024-12-13T14:33:05.415514635Z" level=info msg="CreateContainer within sandbox \"3593de77b9f29f91b793e92bbd9b309f3db445e8404130aa97ddf0a5f2c78c46\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"778b15ba4a1aad7af929b8e1a625b6ba6a89a1da8d2c54b525346e864e890c40\"" Dec 13 14:33:05.416517 env[1414]: time="2024-12-13T14:33:05.416482851Z" level=info msg="StartContainer for \"778b15ba4a1aad7af929b8e1a625b6ba6a89a1da8d2c54b525346e864e890c40\"" Dec 13 14:33:05.446197 systemd[1]: Started cri-containerd-778b15ba4a1aad7af929b8e1a625b6ba6a89a1da8d2c54b525346e864e890c40.scope. Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { perfmon } for pid=5458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit[5458]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fd7f4493258 items=0 ppid=5382 pid=5458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:05.463000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737386231356261346131616164376166393239623865316136323562 Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { bpf } for pid=5458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { bpf } for pid=5458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { bpf } for pid=5458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { perfmon } for pid=5458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { perfmon } for pid=5458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { perfmon } for pid=5458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { perfmon } for pid=5458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { perfmon } for pid=5458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { bpf } for pid=5458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { bpf } for pid=5458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit: BPF prog-id=218 op=LOAD Dec 13 14:33:05.463000 audit[5458]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0002f48a8 items=0 ppid=5382 pid=5458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:05.463000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737386231356261346131616164376166393239623865316136323562 Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { bpf } for pid=5458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { bpf } for pid=5458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { perfmon } for pid=5458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { perfmon } for pid=5458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { perfmon } for pid=5458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { perfmon } for pid=5458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { perfmon } for pid=5458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { bpf } for pid=5458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { bpf } for pid=5458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit: BPF prog-id=219 op=LOAD Dec 13 14:33:05.463000 audit[5458]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0002f48f8 items=0 ppid=5382 pid=5458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:05.463000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737386231356261346131616164376166393239623865316136323562 Dec 13 14:33:05.463000 audit: BPF prog-id=219 op=UNLOAD Dec 13 14:33:05.463000 audit: BPF prog-id=218 op=UNLOAD Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { bpf } for pid=5458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { bpf } for pid=5458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { bpf } for pid=5458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { perfmon } for pid=5458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { perfmon } for pid=5458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { perfmon } for pid=5458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { perfmon } for pid=5458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { perfmon } for pid=5458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { bpf } for pid=5458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit[5458]: AVC avc: denied { bpf } for pid=5458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:05.463000 audit: BPF prog-id=220 op=LOAD Dec 13 14:33:05.463000 audit[5458]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0002f4988 items=0 ppid=5382 pid=5458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:05.463000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737386231356261346131616164376166393239623865316136323562 Dec 13 14:33:05.483701 env[1414]: time="2024-12-13T14:33:05.483645235Z" level=info msg="StartContainer for \"778b15ba4a1aad7af929b8e1a625b6ba6a89a1da8d2c54b525346e864e890c40\" returns successfully" Dec 13 14:33:05.521369 systemd[1]: cri-containerd-778b15ba4a1aad7af929b8e1a625b6ba6a89a1da8d2c54b525346e864e890c40.scope: Deactivated successfully. Dec 13 14:33:05.523000 audit: BPF prog-id=220 op=UNLOAD Dec 13 14:33:05.611637 systemd[1]: var-lib-kubelet-pods-6fc9dd3b\x2dfe61\x2d4b81\x2d8279\x2d1d36298429b2-volume\x2dsubpaths-tigera\x2dca\x2dbundle-calico\x2dkube\x2dcontrollers-1.mount: Deactivated successfully. Dec 13 14:33:05.611774 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284-rootfs.mount: Deactivated successfully. Dec 13 14:33:05.611856 systemd[1]: run-netns-cni\x2d86dff023\x2d5c3f\x2d34f8\x2d62d3\x2dcc6b75224a33.mount: Deactivated successfully. Dec 13 14:33:05.611936 systemd[1]: var-lib-kubelet-pods-649f0db6\x2d08d0\x2d42df\x2daf8f\x2dbab1b7d4c727-volume\x2dsubpaths-tigera\x2dca\x2dbundle-calico\x2dnode-1.mount: Deactivated successfully. Dec 13 14:33:05.612091 systemd[1]: var-lib-kubelet-pods-6fc9dd3b\x2dfe61\x2d4b81\x2d8279\x2d1d36298429b2-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d2n4hb.mount: Deactivated successfully. Dec 13 14:33:05.612183 systemd[1]: var-lib-kubelet-pods-36145a65\x2df24e\x2d46df\x2dbc41\x2d9855b657accf-volume\x2dsubpaths-tigera\x2dca\x2dbundle-calico\x2dtypha-1.mount: Deactivated successfully. Dec 13 14:33:05.612269 systemd[1]: var-lib-kubelet-pods-649f0db6\x2d08d0\x2d42df\x2daf8f\x2dbab1b7d4c727-volumes-kubernetes.io\x7esecret-node\x2dcerts.mount: Deactivated successfully. Dec 13 14:33:05.612346 systemd[1]: var-lib-kubelet-pods-649f0db6\x2d08d0\x2d42df\x2daf8f\x2dbab1b7d4c727-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dpvrk6.mount: Deactivated successfully. Dec 13 14:33:05.612425 systemd[1]: var-lib-kubelet-pods-36145a65\x2df24e\x2d46df\x2dbc41\x2d9855b657accf-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dxvb2w.mount: Deactivated successfully. Dec 13 14:33:05.612503 systemd[1]: var-lib-kubelet-pods-36145a65\x2df24e\x2d46df\x2dbc41\x2d9855b657accf-volumes-kubernetes.io\x7esecret-typha\x2dcerts.mount: Deactivated successfully. Dec 13 14:33:05.644439 kubelet[2458]: I1213 14:33:05.642845 2458 scope.go:117] "RemoveContainer" containerID="712c356776dbc5d93ac010df3d5eaba59384f8db14ad44b232867b0e07ff03c4" Dec 13 14:33:05.666534 env[1414]: time="2024-12-13T14:33:05.664509455Z" level=info msg="RemoveContainer for \"712c356776dbc5d93ac010df3d5eaba59384f8db14ad44b232867b0e07ff03c4\"" Dec 13 14:33:05.676751 env[1414]: time="2024-12-13T14:33:05.676698052Z" level=info msg="shim disconnected" id=778b15ba4a1aad7af929b8e1a625b6ba6a89a1da8d2c54b525346e864e890c40 Dec 13 14:33:05.676751 env[1414]: time="2024-12-13T14:33:05.676744853Z" level=warning msg="cleaning up after shim disconnected" id=778b15ba4a1aad7af929b8e1a625b6ba6a89a1da8d2c54b525346e864e890c40 namespace=k8s.io Dec 13 14:33:05.676751 env[1414]: time="2024-12-13T14:33:05.676756453Z" level=info msg="cleaning up dead shim" Dec 13 14:33:05.680627 env[1414]: time="2024-12-13T14:33:05.680580815Z" level=info msg="RemoveContainer for \"712c356776dbc5d93ac010df3d5eaba59384f8db14ad44b232867b0e07ff03c4\" returns successfully" Dec 13 14:33:05.681401 kubelet[2458]: I1213 14:33:05.681157 2458 scope.go:117] "RemoveContainer" containerID="70957cddb0a55520dcaacdf43672588a7b1a302783a6401cbf5da080031c4e8d" Dec 13 14:33:05.685002 env[1414]: time="2024-12-13T14:33:05.684964786Z" level=info msg="RemoveContainer for \"70957cddb0a55520dcaacdf43672588a7b1a302783a6401cbf5da080031c4e8d\"" Dec 13 14:33:05.703279 env[1414]: time="2024-12-13T14:33:05.703224181Z" level=warning msg="cleanup warnings time=\"2024-12-13T14:33:05Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5500 runtime=io.containerd.runc.v2\n" Dec 13 14:33:05.714890 env[1414]: time="2024-12-13T14:33:05.714833568Z" level=info msg="RemoveContainer for \"70957cddb0a55520dcaacdf43672588a7b1a302783a6401cbf5da080031c4e8d\" returns successfully" Dec 13 14:33:05.715736 kubelet[2458]: I1213 14:33:05.715696 2458 scope.go:117] "RemoveContainer" containerID="2547bf75cb71cb096b47082a266d08033d1031fa426fe741653b2d3c25dd7250" Dec 13 14:33:05.717111 env[1414]: time="2024-12-13T14:33:05.717066104Z" level=info msg="RemoveContainer for \"2547bf75cb71cb096b47082a266d08033d1031fa426fe741653b2d3c25dd7250\"" Dec 13 14:33:05.725200 env[1414]: time="2024-12-13T14:33:05.725144034Z" level=info msg="RemoveContainer for \"2547bf75cb71cb096b47082a266d08033d1031fa426fe741653b2d3c25dd7250\" returns successfully" Dec 13 14:33:05.725444 kubelet[2458]: I1213 14:33:05.725405 2458 scope.go:117] "RemoveContainer" containerID="9db45fac40121283996d4cd6bd76d1c2fd7e5e300a47596ffaf4368e7c591ade" Dec 13 14:33:05.726676 env[1414]: time="2024-12-13T14:33:05.726573758Z" level=info msg="RemoveContainer for \"9db45fac40121283996d4cd6bd76d1c2fd7e5e300a47596ffaf4368e7c591ade\"" Dec 13 14:33:05.739257 env[1414]: time="2024-12-13T14:33:05.739201661Z" level=info msg="RemoveContainer for \"9db45fac40121283996d4cd6bd76d1c2fd7e5e300a47596ffaf4368e7c591ade\" returns successfully" Dec 13 14:33:05.741725 kubelet[2458]: I1213 14:33:05.741662 2458 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-7d988f8d6b-mdk2g" podStartSLOduration=17.741637101 podStartE2EDuration="17.741637101s" podCreationTimestamp="2024-12-13 14:32:48 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-12-13 14:33:05.741284595 +0000 UTC m=+92.656272244" watchObservedRunningTime="2024-12-13 14:33:05.741637101 +0000 UTC m=+92.656624850" Dec 13 14:33:05.742447 kubelet[2458]: I1213 14:33:05.742408 2458 scope.go:117] "RemoveContainer" containerID="9d6dcf4f3e38c9198571eb5c3017eec686ba0907372bdf402ff60e4184b7420f" Dec 13 14:33:05.748640 env[1414]: time="2024-12-13T14:33:05.748588913Z" level=info msg="RemoveContainer for \"9d6dcf4f3e38c9198571eb5c3017eec686ba0907372bdf402ff60e4184b7420f\"" Dec 13 14:33:05.759318 env[1414]: time="2024-12-13T14:33:05.759260785Z" level=info msg="RemoveContainer for \"9d6dcf4f3e38c9198571eb5c3017eec686ba0907372bdf402ff60e4184b7420f\" returns successfully" Dec 13 14:33:05.979000 audit[5518]: NETFILTER_CFG table=filter:129 family=2 entries=9 op=nft_register_rule pid=5518 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:33:05.979000 audit[5518]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fffadec23f0 a2=0 a3=7fffadec23dc items=0 ppid=2614 pid=5518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:05.979000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:33:05.984000 audit[5518]: NETFILTER_CFG table=nat:130 family=2 entries=27 op=nft_register_chain pid=5518 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:33:05.984000 audit[5518]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7fffadec23f0 a2=0 a3=7fffadec23dc items=0 ppid=2614 pid=5518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:05.984000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:33:06.662270 env[1414]: time="2024-12-13T14:33:06.662197534Z" level=info msg="CreateContainer within sandbox \"3593de77b9f29f91b793e92bbd9b309f3db445e8404130aa97ddf0a5f2c78c46\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Dec 13 14:33:06.701847 env[1414]: time="2024-12-13T14:33:06.701778065Z" level=info msg="CreateContainer within sandbox \"3593de77b9f29f91b793e92bbd9b309f3db445e8404130aa97ddf0a5f2c78c46\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"e0753f38a606c7c641916ae54bbc22d6feb2fcaca7a7618075a15418234c759f\"" Dec 13 14:33:06.704027 env[1414]: time="2024-12-13T14:33:06.702835482Z" level=info msg="StartContainer for \"e0753f38a606c7c641916ae54bbc22d6feb2fcaca7a7618075a15418234c759f\"" Dec 13 14:33:06.741194 systemd[1]: run-containerd-runc-k8s.io-e0753f38a606c7c641916ae54bbc22d6feb2fcaca7a7618075a15418234c759f-runc.7bSj9D.mount: Deactivated successfully. Dec 13 14:33:06.746460 systemd[1]: Started cri-containerd-e0753f38a606c7c641916ae54bbc22d6feb2fcaca7a7618075a15418234c759f.scope. Dec 13 14:33:06.760000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.760000 audit[5525]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00011f6b0 a2=3c a3=7f99202704d8 items=0 ppid=5382 pid=5525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:06.760000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530373533663338613630366337633634313931366165353462626332 Dec 13 14:33:06.761000 audit[5525]: AVC avc: denied { bpf } for pid=5525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.761000 audit[5525]: AVC avc: denied { bpf } for pid=5525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.761000 audit[5525]: AVC avc: denied { bpf } for pid=5525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.761000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.761000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.761000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.761000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.761000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.761000 audit[5525]: AVC avc: denied { bpf } for pid=5525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.761000 audit[5525]: AVC avc: denied { bpf } for pid=5525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.761000 audit: BPF prog-id=221 op=LOAD Dec 13 14:33:06.761000 audit[5525]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011f9d8 a2=78 a3=c0002988b8 items=0 ppid=5382 pid=5525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:06.761000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530373533663338613630366337633634313931366165353462626332 Dec 13 14:33:06.761000 audit[5525]: AVC avc: denied { bpf } for pid=5525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.761000 audit[5525]: AVC avc: denied { bpf } for pid=5525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.761000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.761000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.761000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.761000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.761000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.761000 audit[5525]: AVC avc: denied { bpf } for pid=5525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.761000 audit[5525]: AVC avc: denied { bpf } for pid=5525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.761000 audit: BPF prog-id=222 op=LOAD Dec 13 14:33:06.761000 audit[5525]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00011f770 a2=78 a3=c000298908 items=0 ppid=5382 pid=5525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:06.761000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530373533663338613630366337633634313931366165353462626332 Dec 13 14:33:06.761000 audit: BPF prog-id=222 op=UNLOAD Dec 13 14:33:06.761000 audit: BPF prog-id=221 op=UNLOAD Dec 13 14:33:06.761000 audit[5525]: AVC avc: denied { bpf } for pid=5525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.761000 audit[5525]: AVC avc: denied { bpf } for pid=5525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.761000 audit[5525]: AVC avc: denied { bpf } for pid=5525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.761000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.761000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.761000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.761000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.761000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.761000 audit[5525]: AVC avc: denied { bpf } for pid=5525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.761000 audit[5525]: AVC avc: denied { bpf } for pid=5525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:06.761000 audit: BPF prog-id=223 op=LOAD Dec 13 14:33:06.761000 audit[5525]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011fc30 a2=78 a3=c000298998 items=0 ppid=5382 pid=5525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:06.761000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530373533663338613630366337633634313931366165353462626332 Dec 13 14:33:06.784632 env[1414]: time="2024-12-13T14:33:06.784571186Z" level=info msg="StartContainer for \"e0753f38a606c7c641916ae54bbc22d6feb2fcaca7a7618075a15418234c759f\" returns successfully" Dec 13 14:33:07.244952 systemd[1]: cri-containerd-e0753f38a606c7c641916ae54bbc22d6feb2fcaca7a7618075a15418234c759f.scope: Deactivated successfully. Dec 13 14:33:07.246000 audit: BPF prog-id=223 op=UNLOAD Dec 13 14:33:07.266827 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e0753f38a606c7c641916ae54bbc22d6feb2fcaca7a7618075a15418234c759f-rootfs.mount: Deactivated successfully. Dec 13 14:33:07.286886 kubelet[2458]: I1213 14:33:07.286845 2458 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="36145a65-f24e-46df-bc41-9855b657accf" path="/var/lib/kubelet/pods/36145a65-f24e-46df-bc41-9855b657accf/volumes" Dec 13 14:33:07.314246 kubelet[2458]: I1213 14:33:07.314182 2458 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="649f0db6-08d0-42df-af8f-bab1b7d4c727" path="/var/lib/kubelet/pods/649f0db6-08d0-42df-af8f-bab1b7d4c727/volumes" Dec 13 14:33:07.320298 kubelet[2458]: I1213 14:33:07.320249 2458 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="6fc9dd3b-fe61-4b81-8279-1d36298429b2" path="/var/lib/kubelet/pods/6fc9dd3b-fe61-4b81-8279-1d36298429b2/volumes" Dec 13 14:33:07.325723 env[1414]: time="2024-12-13T14:33:07.325675053Z" level=info msg="shim disconnected" id=e0753f38a606c7c641916ae54bbc22d6feb2fcaca7a7618075a15418234c759f Dec 13 14:33:07.325909 env[1414]: time="2024-12-13T14:33:07.325727154Z" level=warning msg="cleaning up after shim disconnected" id=e0753f38a606c7c641916ae54bbc22d6feb2fcaca7a7618075a15418234c759f namespace=k8s.io Dec 13 14:33:07.325909 env[1414]: time="2024-12-13T14:33:07.325739354Z" level=info msg="cleaning up dead shim" Dec 13 14:33:07.333961 env[1414]: time="2024-12-13T14:33:07.333915783Z" level=warning msg="cleanup warnings time=\"2024-12-13T14:33:07Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5567 runtime=io.containerd.runc.v2\n" Dec 13 14:33:07.685770 env[1414]: time="2024-12-13T14:33:07.685112117Z" level=info msg="CreateContainer within sandbox \"3593de77b9f29f91b793e92bbd9b309f3db445e8404130aa97ddf0a5f2c78c46\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Dec 13 14:33:07.729328 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount815340301.mount: Deactivated successfully. Dec 13 14:33:07.739421 env[1414]: time="2024-12-13T14:33:07.739359272Z" level=info msg="CreateContainer within sandbox \"3593de77b9f29f91b793e92bbd9b309f3db445e8404130aa97ddf0a5f2c78c46\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"07e4121dc409a349dfcdcf13633abee092d5959b01005f2640ad07f186dda800\"" Dec 13 14:33:07.741823 env[1414]: time="2024-12-13T14:33:07.740329187Z" level=info msg="StartContainer for \"07e4121dc409a349dfcdcf13633abee092d5959b01005f2640ad07f186dda800\"" Dec 13 14:33:07.771670 systemd[1]: Started cri-containerd-07e4121dc409a349dfcdcf13633abee092d5959b01005f2640ad07f186dda800.scope. Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { perfmon } for pid=5590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit[5590]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7fdc91213108 items=0 ppid=5382 pid=5590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:07.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037653431323164633430396133343964666364636631333633336162 Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { bpf } for pid=5590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { bpf } for pid=5590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { bpf } for pid=5590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { perfmon } for pid=5590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { perfmon } for pid=5590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { perfmon } for pid=5590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { perfmon } for pid=5590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { perfmon } for pid=5590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { bpf } for pid=5590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { bpf } for pid=5590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit: BPF prog-id=224 op=LOAD Dec 13 14:33:07.786000 audit[5590]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0002c7f98 items=0 ppid=5382 pid=5590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:07.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037653431323164633430396133343964666364636631333633336162 Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { bpf } for pid=5590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { bpf } for pid=5590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { perfmon } for pid=5590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { perfmon } for pid=5590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { perfmon } for pid=5590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { perfmon } for pid=5590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { perfmon } for pid=5590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { bpf } for pid=5590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { bpf } for pid=5590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit: BPF prog-id=225 op=LOAD Dec 13 14:33:07.786000 audit[5590]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0002c7fe8 items=0 ppid=5382 pid=5590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:07.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037653431323164633430396133343964666364636631333633336162 Dec 13 14:33:07.786000 audit: BPF prog-id=225 op=UNLOAD Dec 13 14:33:07.786000 audit: BPF prog-id=224 op=UNLOAD Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { bpf } for pid=5590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { bpf } for pid=5590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { bpf } for pid=5590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { perfmon } for pid=5590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { perfmon } for pid=5590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { perfmon } for pid=5590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { perfmon } for pid=5590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { perfmon } for pid=5590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { bpf } for pid=5590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit[5590]: AVC avc: denied { bpf } for pid=5590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:07.786000 audit: BPF prog-id=226 op=LOAD Dec 13 14:33:07.786000 audit[5590]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0003a6078 items=0 ppid=5382 pid=5590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:07.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037653431323164633430396133343964666364636631333633336162 Dec 13 14:33:07.809770 env[1414]: time="2024-12-13T14:33:07.809708780Z" level=info msg="StartContainer for \"07e4121dc409a349dfcdcf13633abee092d5959b01005f2640ad07f186dda800\" returns successfully" Dec 13 14:33:07.918583 kubelet[2458]: E1213 14:33:07.918483 2458 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="6fc9dd3b-fe61-4b81-8279-1d36298429b2" containerName="calico-kube-controllers" Dec 13 14:33:07.918583 kubelet[2458]: I1213 14:33:07.918579 2458 memory_manager.go:354] "RemoveStaleState removing state" podUID="6fc9dd3b-fe61-4b81-8279-1d36298429b2" containerName="calico-kube-controllers" Dec 13 14:33:07.925175 systemd[1]: Created slice kubepods-besteffort-pode6085c2b_a883_4c0a_bf30_c107cc061097.slice. Dec 13 14:33:08.001058 kubelet[2458]: I1213 14:33:08.001009 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-55d9c\" (UniqueName: \"kubernetes.io/projected/e6085c2b-a883-4c0a-bf30-c107cc061097-kube-api-access-55d9c\") pod \"calico-kube-controllers-76c457bf48-pp85s\" (UID: \"e6085c2b-a883-4c0a-bf30-c107cc061097\") " pod="calico-system/calico-kube-controllers-76c457bf48-pp85s" Dec 13 14:33:08.001058 kubelet[2458]: I1213 14:33:08.001064 2458 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/e6085c2b-a883-4c0a-bf30-c107cc061097-tigera-ca-bundle\") pod \"calico-kube-controllers-76c457bf48-pp85s\" (UID: \"e6085c2b-a883-4c0a-bf30-c107cc061097\") " pod="calico-system/calico-kube-controllers-76c457bf48-pp85s" Dec 13 14:33:08.229948 env[1414]: time="2024-12-13T14:33:08.229891957Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-76c457bf48-pp85s,Uid:e6085c2b-a883-4c0a-bf30-c107cc061097,Namespace:calico-system,Attempt:0,}" Dec 13 14:33:08.377143 systemd-networkd[1577]: cali2bde1a40a11: Link UP Dec 13 14:33:08.384382 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Dec 13 14:33:08.384537 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali2bde1a40a11: link becomes ready Dec 13 14:33:08.385070 systemd-networkd[1577]: cali2bde1a40a11: Gained carrier Dec 13 14:33:08.403813 env[1414]: 2024-12-13 14:33:08.298 [INFO][5640] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--76c457bf48--pp85s-eth0 calico-kube-controllers-76c457bf48- calico-system e6085c2b-a883-4c0a-bf30-c107cc061097 1116 0 2024-12-13 14:33:05 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:76c457bf48 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ci-3510.3.6-a-f6adf0345d calico-kube-controllers-76c457bf48-pp85s eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali2bde1a40a11 [] []}} ContainerID="b189cd575912321aa34b0ab10595b98e75f49a15b57f5f961a1b9ba65e83685c" Namespace="calico-system" Pod="calico-kube-controllers-76c457bf48-pp85s" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--76c457bf48--pp85s-" Dec 13 14:33:08.403813 env[1414]: 2024-12-13 14:33:08.299 [INFO][5640] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="b189cd575912321aa34b0ab10595b98e75f49a15b57f5f961a1b9ba65e83685c" Namespace="calico-system" Pod="calico-kube-controllers-76c457bf48-pp85s" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--76c457bf48--pp85s-eth0" Dec 13 14:33:08.403813 env[1414]: 2024-12-13 14:33:08.334 [INFO][5651] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b189cd575912321aa34b0ab10595b98e75f49a15b57f5f961a1b9ba65e83685c" HandleID="k8s-pod-network.b189cd575912321aa34b0ab10595b98e75f49a15b57f5f961a1b9ba65e83685c" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--76c457bf48--pp85s-eth0" Dec 13 14:33:08.403813 env[1414]: 2024-12-13 14:33:08.343 [INFO][5651] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b189cd575912321aa34b0ab10595b98e75f49a15b57f5f961a1b9ba65e83685c" HandleID="k8s-pod-network.b189cd575912321aa34b0ab10595b98e75f49a15b57f5f961a1b9ba65e83685c" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--76c457bf48--pp85s-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000311520), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.6-a-f6adf0345d", "pod":"calico-kube-controllers-76c457bf48-pp85s", "timestamp":"2024-12-13 14:33:08.334611787 +0000 UTC"}, Hostname:"ci-3510.3.6-a-f6adf0345d", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Dec 13 14:33:08.403813 env[1414]: 2024-12-13 14:33:08.343 [INFO][5651] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 14:33:08.403813 env[1414]: 2024-12-13 14:33:08.343 [INFO][5651] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 14:33:08.403813 env[1414]: 2024-12-13 14:33:08.343 [INFO][5651] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.6-a-f6adf0345d' Dec 13 14:33:08.403813 env[1414]: 2024-12-13 14:33:08.345 [INFO][5651] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.b189cd575912321aa34b0ab10595b98e75f49a15b57f5f961a1b9ba65e83685c" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:33:08.403813 env[1414]: 2024-12-13 14:33:08.349 [INFO][5651] ipam/ipam.go 372: Looking up existing affinities for host host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:33:08.403813 env[1414]: 2024-12-13 14:33:08.352 [INFO][5651] ipam/ipam.go 489: Trying affinity for 192.168.37.64/26 host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:33:08.403813 env[1414]: 2024-12-13 14:33:08.354 [INFO][5651] ipam/ipam.go 155: Attempting to load block cidr=192.168.37.64/26 host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:33:08.403813 env[1414]: 2024-12-13 14:33:08.356 [INFO][5651] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.37.64/26 host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:33:08.403813 env[1414]: 2024-12-13 14:33:08.356 [INFO][5651] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.37.64/26 handle="k8s-pod-network.b189cd575912321aa34b0ab10595b98e75f49a15b57f5f961a1b9ba65e83685c" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:33:08.403813 env[1414]: 2024-12-13 14:33:08.357 [INFO][5651] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.b189cd575912321aa34b0ab10595b98e75f49a15b57f5f961a1b9ba65e83685c Dec 13 14:33:08.403813 env[1414]: 2024-12-13 14:33:08.361 [INFO][5651] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.37.64/26 handle="k8s-pod-network.b189cd575912321aa34b0ab10595b98e75f49a15b57f5f961a1b9ba65e83685c" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:33:08.403813 env[1414]: 2024-12-13 14:33:08.370 [INFO][5651] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.37.71/26] block=192.168.37.64/26 handle="k8s-pod-network.b189cd575912321aa34b0ab10595b98e75f49a15b57f5f961a1b9ba65e83685c" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:33:08.403813 env[1414]: 2024-12-13 14:33:08.370 [INFO][5651] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.37.71/26] handle="k8s-pod-network.b189cd575912321aa34b0ab10595b98e75f49a15b57f5f961a1b9ba65e83685c" host="ci-3510.3.6-a-f6adf0345d" Dec 13 14:33:08.403813 env[1414]: 2024-12-13 14:33:08.370 [INFO][5651] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 14:33:08.403813 env[1414]: 2024-12-13 14:33:08.370 [INFO][5651] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.37.71/26] IPv6=[] ContainerID="b189cd575912321aa34b0ab10595b98e75f49a15b57f5f961a1b9ba65e83685c" HandleID="k8s-pod-network.b189cd575912321aa34b0ab10595b98e75f49a15b57f5f961a1b9ba65e83685c" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--76c457bf48--pp85s-eth0" Dec 13 14:33:08.404716 env[1414]: 2024-12-13 14:33:08.372 [INFO][5640] cni-plugin/k8s.go 386: Populated endpoint ContainerID="b189cd575912321aa34b0ab10595b98e75f49a15b57f5f961a1b9ba65e83685c" Namespace="calico-system" Pod="calico-kube-controllers-76c457bf48-pp85s" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--76c457bf48--pp85s-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--76c457bf48--pp85s-eth0", GenerateName:"calico-kube-controllers-76c457bf48-", Namespace:"calico-system", SelfLink:"", UID:"e6085c2b-a883-4c0a-bf30-c107cc061097", ResourceVersion:"1116", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 14, 33, 5, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"76c457bf48", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.6-a-f6adf0345d", ContainerID:"", Pod:"calico-kube-controllers-76c457bf48-pp85s", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.37.71/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali2bde1a40a11", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 14:33:08.404716 env[1414]: 2024-12-13 14:33:08.372 [INFO][5640] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.37.71/32] ContainerID="b189cd575912321aa34b0ab10595b98e75f49a15b57f5f961a1b9ba65e83685c" Namespace="calico-system" Pod="calico-kube-controllers-76c457bf48-pp85s" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--76c457bf48--pp85s-eth0" Dec 13 14:33:08.404716 env[1414]: 2024-12-13 14:33:08.372 [INFO][5640] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali2bde1a40a11 ContainerID="b189cd575912321aa34b0ab10595b98e75f49a15b57f5f961a1b9ba65e83685c" Namespace="calico-system" Pod="calico-kube-controllers-76c457bf48-pp85s" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--76c457bf48--pp85s-eth0" Dec 13 14:33:08.404716 env[1414]: 2024-12-13 14:33:08.386 [INFO][5640] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b189cd575912321aa34b0ab10595b98e75f49a15b57f5f961a1b9ba65e83685c" Namespace="calico-system" Pod="calico-kube-controllers-76c457bf48-pp85s" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--76c457bf48--pp85s-eth0" Dec 13 14:33:08.404716 env[1414]: 2024-12-13 14:33:08.386 [INFO][5640] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="b189cd575912321aa34b0ab10595b98e75f49a15b57f5f961a1b9ba65e83685c" Namespace="calico-system" Pod="calico-kube-controllers-76c457bf48-pp85s" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--76c457bf48--pp85s-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--76c457bf48--pp85s-eth0", GenerateName:"calico-kube-controllers-76c457bf48-", Namespace:"calico-system", SelfLink:"", UID:"e6085c2b-a883-4c0a-bf30-c107cc061097", ResourceVersion:"1116", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 14, 33, 5, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"76c457bf48", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.6-a-f6adf0345d", ContainerID:"b189cd575912321aa34b0ab10595b98e75f49a15b57f5f961a1b9ba65e83685c", Pod:"calico-kube-controllers-76c457bf48-pp85s", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.37.71/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali2bde1a40a11", MAC:"9e:c3:0a:ba:6d:a9", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 14:33:08.404716 env[1414]: 2024-12-13 14:33:08.399 [INFO][5640] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="b189cd575912321aa34b0ab10595b98e75f49a15b57f5f961a1b9ba65e83685c" Namespace="calico-system" Pod="calico-kube-controllers-76c457bf48-pp85s" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--76c457bf48--pp85s-eth0" Dec 13 14:33:08.420813 env[1414]: time="2024-12-13T14:33:08.420724028Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Dec 13 14:33:08.420813 env[1414]: time="2024-12-13T14:33:08.420763629Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Dec 13 14:33:08.421075 env[1414]: time="2024-12-13T14:33:08.420786929Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Dec 13 14:33:08.421413 env[1414]: time="2024-12-13T14:33:08.421327637Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b189cd575912321aa34b0ab10595b98e75f49a15b57f5f961a1b9ba65e83685c pid=5677 runtime=io.containerd.runc.v2 Dec 13 14:33:08.437020 systemd[1]: Started cri-containerd-b189cd575912321aa34b0ab10595b98e75f49a15b57f5f961a1b9ba65e83685c.scope. Dec 13 14:33:08.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.451000 audit: BPF prog-id=227 op=LOAD Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit[5687]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=5677 pid=5687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:08.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231383963643537353931323332316161333462306162313035393562 Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit[5687]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=5677 pid=5687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:08.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231383963643537353931323332316161333462306162313035393562 Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit: BPF prog-id=228 op=LOAD Dec 13 14:33:08.452000 audit[5687]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0000ebce0 items=0 ppid=5677 pid=5687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:08.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231383963643537353931323332316161333462306162313035393562 Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit: BPF prog-id=229 op=LOAD Dec 13 14:33:08.452000 audit[5687]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0000ebd28 items=0 ppid=5677 pid=5687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:08.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231383963643537353931323332316161333462306162313035393562 Dec 13 14:33:08.452000 audit: BPF prog-id=229 op=UNLOAD Dec 13 14:33:08.452000 audit: BPF prog-id=228 op=UNLOAD Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.452000 audit: BPF prog-id=230 op=LOAD Dec 13 14:33:08.452000 audit[5687]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003ec138 items=0 ppid=5677 pid=5687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:08.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231383963643537353931323332316161333462306162313035393562 Dec 13 14:33:08.485612 env[1414]: time="2024-12-13T14:33:08.485052529Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-76c457bf48-pp85s,Uid:e6085c2b-a883-4c0a-bf30-c107cc061097,Namespace:calico-system,Attempt:0,} returns sandbox id \"b189cd575912321aa34b0ab10595b98e75f49a15b57f5f961a1b9ba65e83685c\"" Dec 13 14:33:08.495235 env[1414]: time="2024-12-13T14:33:08.495187087Z" level=info msg="CreateContainer within sandbox \"b189cd575912321aa34b0ab10595b98e75f49a15b57f5f961a1b9ba65e83685c\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Dec 13 14:33:08.532435 env[1414]: time="2024-12-13T14:33:08.532369666Z" level=info msg="CreateContainer within sandbox \"b189cd575912321aa34b0ab10595b98e75f49a15b57f5f961a1b9ba65e83685c\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"87e3c79048a03cad89047ac1c7b79d134ce0c3a99582c53d6d3d96a2ca9058e6\"" Dec 13 14:33:08.535238 env[1414]: time="2024-12-13T14:33:08.533175978Z" level=info msg="StartContainer for \"87e3c79048a03cad89047ac1c7b79d134ce0c3a99582c53d6d3d96a2ca9058e6\"" Dec 13 14:33:08.554181 systemd[1]: Started cri-containerd-87e3c79048a03cad89047ac1c7b79d134ce0c3a99582c53d6d3d96a2ca9058e6.scope. Dec 13 14:33:08.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.570000 audit: BPF prog-id=231 op=LOAD Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit[5718]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=5677 pid=5718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:08.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837653363373930343861303363616438393034376163316337623739 Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit[5718]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=8 items=0 ppid=5677 pid=5718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:08.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837653363373930343861303363616438393034376163316337623739 Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit: BPF prog-id=232 op=LOAD Dec 13 14:33:08.571000 audit[5718]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c000299b60 items=0 ppid=5677 pid=5718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:08.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837653363373930343861303363616438393034376163316337623739 Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit: BPF prog-id=233 op=LOAD Dec 13 14:33:08.571000 audit[5718]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c000299ba8 items=0 ppid=5677 pid=5718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:08.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837653363373930343861303363616438393034376163316337623739 Dec 13 14:33:08.571000 audit: BPF prog-id=233 op=UNLOAD Dec 13 14:33:08.571000 audit: BPF prog-id=232 op=UNLOAD Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { perfmon } for pid=5718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit[5718]: AVC avc: denied { bpf } for pid=5718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:08.571000 audit: BPF prog-id=234 op=LOAD Dec 13 14:33:08.571000 audit[5718]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c000299fb8 items=0 ppid=5677 pid=5718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:08.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837653363373930343861303363616438393034376163316337623739 Dec 13 14:33:08.609416 env[1414]: time="2024-12-13T14:33:08.609344764Z" level=info msg="StartContainer for \"87e3c79048a03cad89047ac1c7b79d134ce0c3a99582c53d6d3d96a2ca9058e6\" returns successfully" Dec 13 14:33:08.746503 systemd[1]: run-containerd-runc-k8s.io-87e3c79048a03cad89047ac1c7b79d134ce0c3a99582c53d6d3d96a2ca9058e6-runc.KnnEzC.mount: Deactivated successfully. Dec 13 14:33:08.785727 kubelet[2458]: I1213 14:33:08.784157 2458 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-jf9pt" podStartSLOduration=4.784132285 podStartE2EDuration="4.784132285s" podCreationTimestamp="2024-12-13 14:33:04 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-12-13 14:33:08.783865981 +0000 UTC m=+95.698853730" watchObservedRunningTime="2024-12-13 14:33:08.784132285 +0000 UTC m=+95.699119934" Dec 13 14:33:08.785727 kubelet[2458]: I1213 14:33:08.784524 2458 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-76c457bf48-pp85s" podStartSLOduration=3.784514191 podStartE2EDuration="3.784514191s" podCreationTimestamp="2024-12-13 14:33:05 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-12-13 14:33:08.713336883 +0000 UTC m=+95.628324532" watchObservedRunningTime="2024-12-13 14:33:08.784514191 +0000 UTC m=+95.699501940" Dec 13 14:33:09.165000 audit[5841]: AVC avc: denied { write } for pid=5841 comm="tee" name="fd" dev="proc" ino=38401 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Dec 13 14:33:09.165000 audit[5841]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd4e6c7a00 a2=241 a3=1b6 items=1 ppid=5807 pid=5841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.165000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Dec 13 14:33:09.165000 audit: PATH item=0 name="/dev/fd/63" inode=37732 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:33:09.165000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Dec 13 14:33:09.182000 audit[5845]: AVC avc: denied { write } for pid=5845 comm="tee" name="fd" dev="proc" ino=37747 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Dec 13 14:33:09.182000 audit[5845]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc30153a10 a2=241 a3=1b6 items=1 ppid=5804 pid=5845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.182000 audit: CWD cwd="/etc/service/enabled/bird6/log" Dec 13 14:33:09.182000 audit: PATH item=0 name="/dev/fd/63" inode=37739 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:33:09.182000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Dec 13 14:33:09.189000 audit[5838]: AVC avc: denied { write } for pid=5838 comm="tee" name="fd" dev="proc" ino=38407 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Dec 13 14:33:09.189000 audit[5838]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdbea9aa10 a2=241 a3=1b6 items=1 ppid=5800 pid=5838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.189000 audit: CWD cwd="/etc/service/enabled/confd/log" Dec 13 14:33:09.189000 audit: PATH item=0 name="/dev/fd/63" inode=37727 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:33:09.189000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Dec 13 14:33:09.201000 audit[5858]: AVC avc: denied { write } for pid=5858 comm="tee" name="fd" dev="proc" ino=38416 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Dec 13 14:33:09.201000 audit[5858]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe964e4a10 a2=241 a3=1b6 items=1 ppid=5797 pid=5858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.201000 audit: CWD cwd="/etc/service/enabled/felix/log" Dec 13 14:33:09.201000 audit: PATH item=0 name="/dev/fd/63" inode=37749 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:33:09.205000 audit[5855]: AVC avc: denied { write } for pid=5855 comm="tee" name="fd" dev="proc" ino=38422 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Dec 13 14:33:09.205000 audit[5855]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd85d66a12 a2=241 a3=1b6 items=1 ppid=5799 pid=5855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.205000 audit: CWD cwd="/etc/service/enabled/cni/log" Dec 13 14:33:09.205000 audit: PATH item=0 name="/dev/fd/63" inode=37744 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:33:09.201000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Dec 13 14:33:09.224000 audit[5862]: AVC avc: denied { write } for pid=5862 comm="tee" name="fd" dev="proc" ino=38426 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Dec 13 14:33:09.205000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Dec 13 14:33:09.224000 audit[5862]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe50ba1a11 a2=241 a3=1b6 items=1 ppid=5803 pid=5862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.224000 audit: CWD cwd="/etc/service/enabled/bird/log" Dec 13 14:33:09.224000 audit: PATH item=0 name="/dev/fd/63" inode=37750 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:33:09.224000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Dec 13 14:33:09.247000 audit[5871]: AVC avc: denied { write } for pid=5871 comm="tee" name="fd" dev="proc" ino=38431 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Dec 13 14:33:09.247000 audit[5871]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffcd73fda01 a2=241 a3=1b6 items=1 ppid=5816 pid=5871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.247000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Dec 13 14:33:09.247000 audit: PATH item=0 name="/dev/fd/63" inode=37752 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:33:09.247000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Dec 13 14:33:09.362000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.362000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.362000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.362000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.362000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.362000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.362000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.362000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.362000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.362000 audit: BPF prog-id=235 op=LOAD Dec 13 14:33:09.362000 audit[5885]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd7e4dcb40 a2=98 a3=3 items=0 ppid=5798 pid=5885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.362000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:33:09.362000 audit: BPF prog-id=235 op=UNLOAD Dec 13 14:33:09.362000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.362000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.362000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.362000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.362000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.362000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.362000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.362000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.362000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.362000 audit: BPF prog-id=236 op=LOAD Dec 13 14:33:09.362000 audit[5885]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd7e4dc920 a2=74 a3=540051 items=0 ppid=5798 pid=5885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.362000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:33:09.363000 audit: BPF prog-id=236 op=UNLOAD Dec 13 14:33:09.363000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.363000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.363000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.363000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.363000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.363000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.363000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.363000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.363000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.363000 audit: BPF prog-id=237 op=LOAD Dec 13 14:33:09.363000 audit[5885]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd7e4dc950 a2=94 a3=2 items=0 ppid=5798 pid=5885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.363000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:33:09.363000 audit: BPF prog-id=237 op=UNLOAD Dec 13 14:33:09.577758 systemd-networkd[1577]: cali2bde1a40a11: Gained IPv6LL Dec 13 14:33:09.588000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.588000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.588000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.588000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.588000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.588000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.588000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.588000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.588000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.588000 audit: BPF prog-id=238 op=LOAD Dec 13 14:33:09.588000 audit[5885]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd7e4dc810 a2=40 a3=1 items=0 ppid=5798 pid=5885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.588000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:33:09.588000 audit: BPF prog-id=238 op=UNLOAD Dec 13 14:33:09.588000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.588000 audit[5885]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffd7e4dc8e0 a2=50 a3=7ffd7e4dc9c0 items=0 ppid=5798 pid=5885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.588000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:33:09.598000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.598000 audit[5885]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd7e4dc820 a2=28 a3=0 items=0 ppid=5798 pid=5885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.598000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:33:09.598000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.598000 audit[5885]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd7e4dc850 a2=28 a3=0 items=0 ppid=5798 pid=5885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.598000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:33:09.598000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.598000 audit[5885]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd7e4dc760 a2=28 a3=0 items=0 ppid=5798 pid=5885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.598000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:33:09.598000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.598000 audit[5885]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd7e4dc870 a2=28 a3=0 items=0 ppid=5798 pid=5885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.598000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:33:09.598000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.598000 audit[5885]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd7e4dc850 a2=28 a3=0 items=0 ppid=5798 pid=5885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.598000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:33:09.598000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.598000 audit[5885]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd7e4dc840 a2=28 a3=0 items=0 ppid=5798 pid=5885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.598000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:33:09.598000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.598000 audit[5885]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd7e4dc870 a2=28 a3=0 items=0 ppid=5798 pid=5885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.598000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:33:09.598000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.598000 audit[5885]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd7e4dc850 a2=28 a3=0 items=0 ppid=5798 pid=5885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.598000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:33:09.598000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.598000 audit[5885]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd7e4dc870 a2=28 a3=0 items=0 ppid=5798 pid=5885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.598000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:33:09.598000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.598000 audit[5885]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd7e4dc840 a2=28 a3=0 items=0 ppid=5798 pid=5885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.598000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:33:09.599000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.599000 audit[5885]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd7e4dc8b0 a2=28 a3=0 items=0 ppid=5798 pid=5885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.599000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:33:09.599000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.599000 audit[5885]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffd7e4dc660 a2=50 a3=1 items=0 ppid=5798 pid=5885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.599000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:33:09.599000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.599000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.599000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.599000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.599000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.599000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.599000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.599000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.599000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.599000 audit: BPF prog-id=239 op=LOAD Dec 13 14:33:09.599000 audit[5885]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd7e4dc660 a2=94 a3=5 items=0 ppid=5798 pid=5885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.599000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:33:09.599000 audit: BPF prog-id=239 op=UNLOAD Dec 13 14:33:09.599000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.599000 audit[5885]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffd7e4dc710 a2=50 a3=1 items=0 ppid=5798 pid=5885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.599000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:33:09.599000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.599000 audit[5885]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffd7e4dc830 a2=4 a3=38 items=0 ppid=5798 pid=5885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.599000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:33:09.599000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.599000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.599000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.599000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.599000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.599000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.599000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.599000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.599000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.599000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.599000 audit[5885]: AVC avc: denied { confidentiality } for pid=5885 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Dec 13 14:33:09.599000 audit[5885]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd7e4dc880 a2=94 a3=6 items=0 ppid=5798 pid=5885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.599000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:33:09.600000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.600000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.600000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.600000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.600000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.600000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.600000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.600000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.600000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.600000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.600000 audit[5885]: AVC avc: denied { confidentiality } for pid=5885 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Dec 13 14:33:09.600000 audit[5885]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd7e4dc030 a2=94 a3=83 items=0 ppid=5798 pid=5885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.600000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:33:09.600000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.600000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.600000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.600000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.600000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.600000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.600000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.600000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.600000 audit[5885]: AVC avc: denied { perfmon } for pid=5885 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.600000 audit[5885]: AVC avc: denied { bpf } for pid=5885 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.600000 audit[5885]: AVC avc: denied { confidentiality } for pid=5885 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Dec 13 14:33:09.600000 audit[5885]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd7e4dc030 a2=94 a3=83 items=0 ppid=5798 pid=5885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.600000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 14:33:09.609000 audit[5909]: AVC avc: denied { bpf } for pid=5909 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.609000 audit[5909]: AVC avc: denied { bpf } for pid=5909 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.609000 audit[5909]: AVC avc: denied { perfmon } for pid=5909 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.609000 audit[5909]: AVC avc: denied { perfmon } for pid=5909 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.609000 audit[5909]: AVC avc: denied { perfmon } for pid=5909 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.609000 audit[5909]: AVC avc: denied { perfmon } for pid=5909 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.609000 audit[5909]: AVC avc: denied { perfmon } for pid=5909 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.609000 audit[5909]: AVC avc: denied { bpf } for pid=5909 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.609000 audit[5909]: AVC avc: denied { bpf } for pid=5909 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.609000 audit: BPF prog-id=240 op=LOAD Dec 13 14:33:09.609000 audit[5909]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff968f0230 a2=98 a3=1999999999999999 items=0 ppid=5798 pid=5909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.609000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Dec 13 14:33:09.610000 audit: BPF prog-id=240 op=UNLOAD Dec 13 14:33:09.610000 audit[5909]: AVC avc: denied { bpf } for pid=5909 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.610000 audit[5909]: AVC avc: denied { bpf } for pid=5909 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.610000 audit[5909]: AVC avc: denied { perfmon } for pid=5909 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.610000 audit[5909]: AVC avc: denied { perfmon } for pid=5909 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.610000 audit[5909]: AVC avc: denied { perfmon } for pid=5909 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.610000 audit[5909]: AVC avc: denied { perfmon } for pid=5909 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.610000 audit[5909]: AVC avc: denied { perfmon } for pid=5909 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.610000 audit[5909]: AVC avc: denied { bpf } for pid=5909 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.610000 audit[5909]: AVC avc: denied { bpf } for pid=5909 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.610000 audit: BPF prog-id=241 op=LOAD Dec 13 14:33:09.610000 audit[5909]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff968f0110 a2=74 a3=ffff items=0 ppid=5798 pid=5909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.610000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Dec 13 14:33:09.610000 audit: BPF prog-id=241 op=UNLOAD Dec 13 14:33:09.610000 audit[5909]: AVC avc: denied { bpf } for pid=5909 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.610000 audit[5909]: AVC avc: denied { bpf } for pid=5909 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.610000 audit[5909]: AVC avc: denied { perfmon } for pid=5909 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.610000 audit[5909]: AVC avc: denied { perfmon } for pid=5909 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.610000 audit[5909]: AVC avc: denied { perfmon } for pid=5909 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.610000 audit[5909]: AVC avc: denied { perfmon } for pid=5909 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.610000 audit[5909]: AVC avc: denied { perfmon } for pid=5909 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.610000 audit[5909]: AVC avc: denied { bpf } for pid=5909 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.610000 audit[5909]: AVC avc: denied { bpf } for pid=5909 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.610000 audit: BPF prog-id=242 op=LOAD Dec 13 14:33:09.610000 audit[5909]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff968f0150 a2=40 a3=7fff968f0330 items=0 ppid=5798 pid=5909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.610000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Dec 13 14:33:09.610000 audit: BPF prog-id=242 op=UNLOAD Dec 13 14:33:09.696752 systemd[1]: run-containerd-runc-k8s.io-07e4121dc409a349dfcdcf13633abee092d5959b01005f2640ad07f186dda800-runc.SVuvV6.mount: Deactivated successfully. Dec 13 14:33:09.730207 kernel: kauditd_printk_skb: 653 callbacks suppressed Dec 13 14:33:09.730347 kernel: audit: type=1400 audit(1734100389.723:1527): avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.723000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.723000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.753965 systemd[1]: run-containerd-runc-k8s.io-07e4121dc409a349dfcdcf13633abee092d5959b01005f2640ad07f186dda800-runc.19trM7.mount: Deactivated successfully. Dec 13 14:33:09.767865 kernel: audit: type=1400 audit(1734100389.723:1527): avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.790900 kernel: audit: type=1400 audit(1734100389.723:1527): avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.723000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.723000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.816624 kernel: audit: type=1400 audit(1734100389.723:1527): avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.723000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.834589 kernel: audit: type=1400 audit(1734100389.723:1527): avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.723000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.723000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.864239 kernel: audit: type=1400 audit(1734100389.723:1527): avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.864388 kernel: audit: type=1400 audit(1734100389.723:1527): avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.864411 kernel: audit: type=1400 audit(1734100389.723:1527): avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.723000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.723000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.893571 kernel: audit: type=1400 audit(1734100389.723:1527): avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.723000 audit: BPF prog-id=243 op=LOAD Dec 13 14:33:09.723000 audit[5956]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd4f4708d0 a2=98 a3=ffffffff items=0 ppid=5798 pid=5956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.723000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:33:09.773000 audit: BPF prog-id=243 op=UNLOAD Dec 13 14:33:09.773000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.773000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.773000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.773000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.773000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.773000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.773000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.773000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.773000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.899665 kernel: audit: type=1334 audit(1734100389.723:1527): prog-id=243 op=LOAD Dec 13 14:33:09.773000 audit: BPF prog-id=244 op=LOAD Dec 13 14:33:09.773000 audit[5956]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd4f4706e0 a2=74 a3=540051 items=0 ppid=5798 pid=5956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.773000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:33:09.773000 audit: BPF prog-id=244 op=UNLOAD Dec 13 14:33:09.773000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.773000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.773000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.773000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.773000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.773000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.773000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.773000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.773000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.773000 audit: BPF prog-id=245 op=LOAD Dec 13 14:33:09.773000 audit[5956]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd4f470710 a2=94 a3=2 items=0 ppid=5798 pid=5956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.773000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:33:09.773000 audit: BPF prog-id=245 op=UNLOAD Dec 13 14:33:09.773000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.773000 audit[5956]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd4f4705e0 a2=28 a3=0 items=0 ppid=5798 pid=5956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.773000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:33:09.773000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.773000 audit[5956]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd4f470610 a2=28 a3=0 items=0 ppid=5798 pid=5956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.773000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:33:09.773000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.773000 audit[5956]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd4f470520 a2=28 a3=0 items=0 ppid=5798 pid=5956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.773000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:33:09.773000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.773000 audit[5956]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd4f470630 a2=28 a3=0 items=0 ppid=5798 pid=5956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.773000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:33:09.773000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.773000 audit[5956]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd4f470610 a2=28 a3=0 items=0 ppid=5798 pid=5956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.773000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:33:09.773000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.773000 audit[5956]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd4f470600 a2=28 a3=0 items=0 ppid=5798 pid=5956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.773000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:33:09.773000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.773000 audit[5956]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd4f470630 a2=28 a3=0 items=0 ppid=5798 pid=5956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.773000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:33:09.877000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.877000 audit[5956]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd4f470610 a2=28 a3=0 items=0 ppid=5798 pid=5956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.877000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:33:09.897000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.897000 audit[5956]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd4f470630 a2=28 a3=0 items=0 ppid=5798 pid=5956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.897000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:33:09.897000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.897000 audit[5956]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd4f470600 a2=28 a3=0 items=0 ppid=5798 pid=5956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.897000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:33:09.897000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.897000 audit[5956]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd4f470670 a2=28 a3=0 items=0 ppid=5798 pid=5956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.897000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:33:09.897000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.897000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.897000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.897000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.897000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.897000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.897000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.897000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.897000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.897000 audit: BPF prog-id=246 op=LOAD Dec 13 14:33:09.897000 audit[5956]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd4f4704e0 a2=40 a3=0 items=0 ppid=5798 pid=5956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.897000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:33:09.897000 audit: BPF prog-id=246 op=UNLOAD Dec 13 14:33:09.898000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.898000 audit[5956]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffd4f4704d0 a2=50 a3=2800 items=0 ppid=5798 pid=5956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.898000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:33:09.898000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.898000 audit[5956]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffd4f4704d0 a2=50 a3=2800 items=0 ppid=5798 pid=5956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.898000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:33:09.898000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.898000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.898000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.898000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.898000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.898000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.898000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.898000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.898000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.898000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.898000 audit: BPF prog-id=247 op=LOAD Dec 13 14:33:09.898000 audit[5956]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd4f46fcf0 a2=94 a3=2 items=0 ppid=5798 pid=5956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.898000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:33:09.898000 audit: BPF prog-id=247 op=UNLOAD Dec 13 14:33:09.898000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.898000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.898000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.898000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.898000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.898000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.898000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.898000 audit[5956]: AVC avc: denied { perfmon } for pid=5956 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.898000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.898000 audit[5956]: AVC avc: denied { bpf } for pid=5956 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.898000 audit: BPF prog-id=248 op=LOAD Dec 13 14:33:09.898000 audit[5956]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd4f46fdf0 a2=94 a3=2d items=0 ppid=5798 pid=5956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.898000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 14:33:09.902000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.902000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.902000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.902000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.902000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.902000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.902000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.902000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.902000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.902000 audit: BPF prog-id=249 op=LOAD Dec 13 14:33:09.902000 audit[5978]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc50d18f90 a2=98 a3=0 items=0 ppid=5798 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.902000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:33:09.902000 audit: BPF prog-id=249 op=UNLOAD Dec 13 14:33:09.902000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.902000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.902000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.902000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.902000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.902000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.902000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.902000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.902000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.902000 audit: BPF prog-id=250 op=LOAD Dec 13 14:33:09.902000 audit[5978]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc50d18d70 a2=74 a3=540051 items=0 ppid=5798 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.902000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:33:09.903000 audit: BPF prog-id=250 op=UNLOAD Dec 13 14:33:09.903000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.903000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.903000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.903000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.903000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.903000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.903000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.903000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.903000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:09.903000 audit: BPF prog-id=251 op=LOAD Dec 13 14:33:09.903000 audit[5978]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc50d18da0 a2=94 a3=2 items=0 ppid=5798 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:09.903000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:33:09.903000 audit: BPF prog-id=251 op=UNLOAD Dec 13 14:33:10.025000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.025000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.025000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.025000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.025000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.025000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.025000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.025000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.025000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.025000 audit: BPF prog-id=252 op=LOAD Dec 13 14:33:10.025000 audit[5978]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc50d18c60 a2=40 a3=1 items=0 ppid=5798 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:10.025000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:33:10.026000 audit: BPF prog-id=252 op=UNLOAD Dec 13 14:33:10.026000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.026000 audit[5978]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffc50d18d30 a2=50 a3=7ffc50d18e10 items=0 ppid=5798 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:10.026000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:33:10.035000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.035000 audit[5978]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc50d18c70 a2=28 a3=0 items=0 ppid=5798 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:10.035000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:33:10.035000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.035000 audit[5978]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc50d18ca0 a2=28 a3=0 items=0 ppid=5798 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:10.035000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:33:10.035000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.035000 audit[5978]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc50d18bb0 a2=28 a3=0 items=0 ppid=5798 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:10.035000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:33:10.035000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.035000 audit[5978]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc50d18cc0 a2=28 a3=0 items=0 ppid=5798 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:10.035000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:33:10.035000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.035000 audit[5978]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc50d18ca0 a2=28 a3=0 items=0 ppid=5798 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:10.035000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:33:10.035000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.035000 audit[5978]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc50d18c90 a2=28 a3=0 items=0 ppid=5798 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:10.035000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:33:10.035000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.035000 audit[5978]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc50d18cc0 a2=28 a3=0 items=0 ppid=5798 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:10.035000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:33:10.035000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.035000 audit[5978]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc50d18ca0 a2=28 a3=0 items=0 ppid=5798 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:10.035000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:33:10.035000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.035000 audit[5978]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc50d18cc0 a2=28 a3=0 items=0 ppid=5798 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:10.035000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:33:10.035000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.035000 audit[5978]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc50d18c90 a2=28 a3=0 items=0 ppid=5798 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:10.035000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc50d18d00 a2=28 a3=0 items=0 ppid=5798 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:10.036000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc50d18ab0 a2=50 a3=1 items=0 ppid=5798 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:10.036000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit: BPF prog-id=253 op=LOAD Dec 13 14:33:10.036000 audit[5978]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc50d18ab0 a2=94 a3=5 items=0 ppid=5798 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:10.036000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:33:10.036000 audit: BPF prog-id=253 op=UNLOAD Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc50d18b60 a2=50 a3=1 items=0 ppid=5798 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:10.036000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffc50d18c80 a2=4 a3=38 items=0 ppid=5798 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:10.036000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { confidentiality } for pid=5978 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Dec 13 14:33:10.036000 audit[5978]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc50d18cd0 a2=94 a3=6 items=0 ppid=5798 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:10.036000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { confidentiality } for pid=5978 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Dec 13 14:33:10.036000 audit[5978]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc50d18480 a2=94 a3=83 items=0 ppid=5798 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:10.036000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { perfmon } for pid=5978 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.036000 audit[5978]: AVC avc: denied { confidentiality } for pid=5978 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Dec 13 14:33:10.036000 audit[5978]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc50d18480 a2=94 a3=83 items=0 ppid=5798 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:10.036000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:33:10.037000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.037000 audit[5978]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffc50d19ec0 a2=10 a3=f1f00800 items=0 ppid=5798 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:10.037000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:33:10.037000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.037000 audit[5978]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffc50d19d60 a2=10 a3=3 items=0 ppid=5798 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:10.037000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:33:10.037000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.037000 audit[5978]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffc50d19d00 a2=10 a3=3 items=0 ppid=5798 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:10.037000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:33:10.037000 audit[5978]: AVC avc: denied { bpf } for pid=5978 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 14:33:10.037000 audit[5978]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffc50d19d00 a2=10 a3=7 items=0 ppid=5798 pid=5978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:10.037000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 14:33:10.042000 audit: BPF prog-id=248 op=UNLOAD Dec 13 14:33:10.042000 audit[1162]: SYSCALL arch=c000003e syscall=257 success=yes exit=19 a0=ffffff9c a1=558e74527a5f a2=800c1 a3=1a4 items=2 ppid=1 pid=1162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-udevd" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:10.042000 audit: CWD cwd="/" Dec 13 14:33:10.042000 audit: PATH item=0 name=(null) inode=71 dev=00:17 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:udev_runtime_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:33:10.042000 audit: PATH item=1 name=(null) inode=3891 dev=00:17 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:udev_runtime_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 14:33:10.042000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-udevd" Dec 13 14:33:10.106000 audit[6009]: NETFILTER_CFG table=filter:131 family=2 entries=72 op=nft_register_chain pid=6009 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Dec 13 14:33:10.106000 audit[6009]: SYSCALL arch=c000003e syscall=46 success=yes exit=25044 a0=3 a1=7fffb6078790 a2=0 a3=7fffb607877c items=0 ppid=5798 pid=6009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:10.106000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Dec 13 14:33:10.107000 audit[6009]: NETFILTER_CFG table=filter:132 family=2 entries=2 op=nft_unregister_chain pid=6009 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Dec 13 14:33:10.107000 audit[6009]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7fffb6078790 a2=0 a3=56428c8e9000 items=0 ppid=5798 pid=6009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:10.107000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Dec 13 14:33:23.477000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:33:23.483583 kernel: kauditd_printk_skb: 281 callbacks suppressed Dec 13 14:33:23.483675 kernel: audit: type=1400 audit(1734100403.477:1586): avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:33:23.477000 audit[2277]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001148360 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:33:23.526231 kernel: audit: type=1300 audit(1734100403.477:1586): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001148360 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:33:23.526378 kernel: audit: type=1327 audit(1734100403.477:1586): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:33:23.477000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:33:23.478000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:33:23.544565 kernel: audit: type=1400 audit(1734100403.478:1587): avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:33:23.478000 audit[2277]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00155f3a0 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:33:23.580822 kernel: audit: type=1300 audit(1734100403.478:1587): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00155f3a0 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:33:23.478000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:33:23.598692 kernel: audit: type=1327 audit(1734100403.478:1587): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:33:23.764000 audit[2312]: AVC avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:33:23.764000 audit[2312]: AVC avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:33:23.799994 kernel: audit: type=1400 audit(1734100403.764:1588): avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:33:23.800157 kernel: audit: type=1400 audit(1734100403.764:1589): avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:33:23.800195 kernel: audit: type=1300 audit(1734100403.764:1589): arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c00ea790e0 a2=fc6 a3=0 items=0 ppid=2160 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 key=(null) Dec 13 14:33:23.764000 audit[2312]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c00ea790e0 a2=fc6 a3=0 items=0 ppid=2160 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 key=(null) Dec 13 14:33:23.821022 kernel: audit: type=1327 audit(1734100403.764:1589): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Dec 13 14:33:23.764000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Dec 13 14:33:23.764000 audit[2312]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c0106911d0 a2=fc6 a3=0 items=0 ppid=2160 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 key=(null) Dec 13 14:33:23.764000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Dec 13 14:33:23.781000 audit[2312]: AVC avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7362 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:33:23.781000 audit[2312]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c00e4fb410 a2=fc6 a3=0 items=0 ppid=2160 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 key=(null) Dec 13 14:33:23.781000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Dec 13 14:33:23.781000 audit[2312]: AVC avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:33:23.781000 audit[2312]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c00ab147a0 a2=fc6 a3=0 items=0 ppid=2160 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 key=(null) Dec 13 14:33:23.781000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Dec 13 14:33:23.782000 audit[2312]: AVC avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:33:23.782000 audit[2312]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c010691260 a2=fc6 a3=0 items=0 ppid=2160 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 key=(null) Dec 13 14:33:23.782000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Dec 13 14:33:23.782000 audit[2312]: AVC avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:33:23.782000 audit[2312]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c0106912c0 a2=fc6 a3=0 items=0 ppid=2160 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 key=(null) Dec 13 14:33:23.782000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Dec 13 14:33:31.596000 audit[4500]: AVC avc: denied { watch } for pid=4500 comm="apiserver" path="/calico-apiserver-certs/..2024_12_13_14_32_10.2141185995/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c566,c1022 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c566,c1022 tclass=file permissive=0 Dec 13 14:33:31.601558 kernel: kauditd_printk_skb: 14 callbacks suppressed Dec 13 14:33:31.601662 kernel: audit: type=1400 audit(1734100411.596:1594): avc: denied { watch } for pid=4500 comm="apiserver" path="/calico-apiserver-certs/..2024_12_13_14_32_10.2141185995/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c566,c1022 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c566,c1022 tclass=file permissive=0 Dec 13 14:33:31.596000 audit[4500]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000b5b4e0 a2=fc6 a3=0 items=0 ppid=3998 pid=4500 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c566,c1022 key=(null) Dec 13 14:33:31.620571 kernel: audit: type=1300 audit(1734100411.596:1594): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000b5b4e0 a2=fc6 a3=0 items=0 ppid=3998 pid=4500 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c566,c1022 key=(null) Dec 13 14:33:31.596000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Dec 13 14:33:31.641577 kernel: audit: type=1327 audit(1734100411.596:1594): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Dec 13 14:33:31.863000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:33:31.863000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:33:31.897707 kernel: audit: type=1400 audit(1734100411.863:1595): avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:33:31.897838 kernel: audit: type=1400 audit(1734100411.863:1596): avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:33:31.897863 kernel: audit: type=1300 audit(1734100411.863:1596): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001813b80 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:33:31.863000 audit[2277]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001813b80 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:33:31.926743 kernel: audit: type=1327 audit(1734100411.863:1596): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:33:31.863000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:33:31.863000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:33:31.951400 kernel: audit: type=1400 audit(1734100411.863:1597): avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:33:31.951521 kernel: audit: type=1300 audit(1734100411.863:1597): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001813ba0 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:33:31.863000 audit[2277]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001813ba0 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:33:31.863000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:33:31.989521 kernel: audit: type=1327 audit(1734100411.863:1597): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:33:31.863000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:33:31.863000 audit[2277]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001813ec0 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:33:31.863000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:33:31.863000 audit[2277]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00155f8c0 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:33:31.863000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:33:35.166121 env[1414]: time="2024-12-13T14:33:35.166073880Z" level=info msg="StopPodSandbox for \"2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284\"" Dec 13 14:33:35.245000 audit[4609]: AVC avc: denied { watch } for pid=4609 comm="apiserver" path="/calico-apiserver-certs/..2024_12_13_14_32_10.647068444/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c174,c671 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c174,c671 tclass=file permissive=0 Dec 13 14:33:35.245000 audit[4609]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0024da4a0 a2=fc6 a3=0 items=0 ppid=4224 pid=4609 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c174,c671 key=(null) Dec 13 14:33:35.245000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Dec 13 14:33:35.254751 env[1414]: 2024-12-13 14:33:35.202 [WARNING][6060] cni-plugin/k8s.go 566: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" Dec 13 14:33:35.254751 env[1414]: 2024-12-13 14:33:35.202 [INFO][6060] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Dec 13 14:33:35.254751 env[1414]: 2024-12-13 14:33:35.202 [INFO][6060] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" iface="eth0" netns="" Dec 13 14:33:35.254751 env[1414]: 2024-12-13 14:33:35.202 [INFO][6060] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Dec 13 14:33:35.254751 env[1414]: 2024-12-13 14:33:35.202 [INFO][6060] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Dec 13 14:33:35.254751 env[1414]: 2024-12-13 14:33:35.225 [INFO][6066] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" HandleID="k8s-pod-network.2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" Dec 13 14:33:35.254751 env[1414]: 2024-12-13 14:33:35.226 [INFO][6066] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 14:33:35.254751 env[1414]: 2024-12-13 14:33:35.226 [INFO][6066] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 14:33:35.254751 env[1414]: 2024-12-13 14:33:35.249 [WARNING][6066] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" HandleID="k8s-pod-network.2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" Dec 13 14:33:35.254751 env[1414]: 2024-12-13 14:33:35.249 [INFO][6066] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" HandleID="k8s-pod-network.2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" Dec 13 14:33:35.254751 env[1414]: 2024-12-13 14:33:35.251 [INFO][6066] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 14:33:35.254751 env[1414]: 2024-12-13 14:33:35.253 [INFO][6060] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Dec 13 14:33:35.255763 env[1414]: time="2024-12-13T14:33:35.255707304Z" level=info msg="TearDown network for sandbox \"2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284\" successfully" Dec 13 14:33:35.255933 env[1414]: time="2024-12-13T14:33:35.255909307Z" level=info msg="StopPodSandbox for \"2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284\" returns successfully" Dec 13 14:33:35.256597 env[1414]: time="2024-12-13T14:33:35.256537414Z" level=info msg="RemovePodSandbox for \"2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284\"" Dec 13 14:33:35.256794 env[1414]: time="2024-12-13T14:33:35.256734816Z" level=info msg="Forcibly stopping sandbox \"2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284\"" Dec 13 14:33:35.429391 env[1414]: 2024-12-13 14:33:35.341 [WARNING][6101] cni-plugin/k8s.go 566: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" WorkloadEndpoint="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" Dec 13 14:33:35.429391 env[1414]: 2024-12-13 14:33:35.341 [INFO][6101] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Dec 13 14:33:35.429391 env[1414]: 2024-12-13 14:33:35.341 [INFO][6101] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" iface="eth0" netns="" Dec 13 14:33:35.429391 env[1414]: 2024-12-13 14:33:35.341 [INFO][6101] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Dec 13 14:33:35.429391 env[1414]: 2024-12-13 14:33:35.341 [INFO][6101] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Dec 13 14:33:35.429391 env[1414]: 2024-12-13 14:33:35.388 [INFO][6112] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" HandleID="k8s-pod-network.2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" Dec 13 14:33:35.429391 env[1414]: 2024-12-13 14:33:35.388 [INFO][6112] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 14:33:35.429391 env[1414]: 2024-12-13 14:33:35.389 [INFO][6112] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 14:33:35.429391 env[1414]: 2024-12-13 14:33:35.421 [WARNING][6112] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" HandleID="k8s-pod-network.2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" Dec 13 14:33:35.429391 env[1414]: 2024-12-13 14:33:35.421 [INFO][6112] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" HandleID="k8s-pod-network.2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Workload="ci--3510.3.6--a--f6adf0345d-k8s-calico--kube--controllers--f9f5cc4c--fjz2l-eth0" Dec 13 14:33:35.429391 env[1414]: 2024-12-13 14:33:35.426 [INFO][6112] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 14:33:35.429391 env[1414]: 2024-12-13 14:33:35.427 [INFO][6101] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284" Dec 13 14:33:35.430509 env[1414]: time="2024-12-13T14:33:35.430462301Z" level=info msg="TearDown network for sandbox \"2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284\" successfully" Dec 13 14:33:35.443373 env[1414]: time="2024-12-13T14:33:35.441893731Z" level=info msg="RemovePodSandbox \"2d365ba6298c8e6e382ca0517206fd800895353dffee7207be6a4a3ef919a284\" returns successfully" Dec 13 14:33:35.444071 env[1414]: time="2024-12-13T14:33:35.444039356Z" level=info msg="StopPodSandbox for \"dec69fb3890cbf52f6b2c749d651817db79183771fd686abfe3d8dd3df856b72\"" Dec 13 14:33:35.444333 env[1414]: time="2024-12-13T14:33:35.444282759Z" level=info msg="TearDown network for sandbox \"dec69fb3890cbf52f6b2c749d651817db79183771fd686abfe3d8dd3df856b72\" successfully" Dec 13 14:33:35.444432 env[1414]: time="2024-12-13T14:33:35.444413360Z" level=info msg="StopPodSandbox for \"dec69fb3890cbf52f6b2c749d651817db79183771fd686abfe3d8dd3df856b72\" returns successfully" Dec 13 14:33:35.445067 env[1414]: time="2024-12-13T14:33:35.445023767Z" level=info msg="RemovePodSandbox for \"dec69fb3890cbf52f6b2c749d651817db79183771fd686abfe3d8dd3df856b72\"" Dec 13 14:33:35.445264 env[1414]: time="2024-12-13T14:33:35.445205369Z" level=info msg="Forcibly stopping sandbox \"dec69fb3890cbf52f6b2c749d651817db79183771fd686abfe3d8dd3df856b72\"" Dec 13 14:33:35.445474 env[1414]: time="2024-12-13T14:33:35.445446372Z" level=info msg="TearDown network for sandbox \"dec69fb3890cbf52f6b2c749d651817db79183771fd686abfe3d8dd3df856b72\" successfully" Dec 13 14:33:35.457885 env[1414]: time="2024-12-13T14:33:35.457833113Z" level=info msg="RemovePodSandbox \"dec69fb3890cbf52f6b2c749d651817db79183771fd686abfe3d8dd3df856b72\" returns successfully" Dec 13 14:33:35.458658 env[1414]: time="2024-12-13T14:33:35.458626822Z" level=info msg="StopPodSandbox for \"20a2c38c124635dc9b01a2156cc8850ddca570a0a82a40705df1a0aa9cff962e\"" Dec 13 14:33:35.458896 env[1414]: time="2024-12-13T14:33:35.458848525Z" level=info msg="TearDown network for sandbox \"20a2c38c124635dc9b01a2156cc8850ddca570a0a82a40705df1a0aa9cff962e\" successfully" Dec 13 14:33:35.458996 env[1414]: time="2024-12-13T14:33:35.458979227Z" level=info msg="StopPodSandbox for \"20a2c38c124635dc9b01a2156cc8850ddca570a0a82a40705df1a0aa9cff962e\" returns successfully" Dec 13 14:33:35.459448 env[1414]: time="2024-12-13T14:33:35.459424332Z" level=info msg="RemovePodSandbox for \"20a2c38c124635dc9b01a2156cc8850ddca570a0a82a40705df1a0aa9cff962e\"" Dec 13 14:33:35.459618 env[1414]: time="2024-12-13T14:33:35.459578533Z" level=info msg="Forcibly stopping sandbox \"20a2c38c124635dc9b01a2156cc8850ddca570a0a82a40705df1a0aa9cff962e\"" Dec 13 14:33:35.459755 env[1414]: time="2024-12-13T14:33:35.459736135Z" level=info msg="TearDown network for sandbox \"20a2c38c124635dc9b01a2156cc8850ddca570a0a82a40705df1a0aa9cff962e\" successfully" Dec 13 14:33:35.469007 env[1414]: time="2024-12-13T14:33:35.468928140Z" level=info msg="RemovePodSandbox \"20a2c38c124635dc9b01a2156cc8850ddca570a0a82a40705df1a0aa9cff962e\" returns successfully" Dec 13 14:33:35.654000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.24:22-10.200.16.10:44200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:33:35.654934 systemd[1]: Started sshd@7-10.200.8.24:22-10.200.16.10:44200.service. Dec 13 14:33:36.361000 audit[6123]: USER_ACCT pid=6123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:36.362602 sshd[6123]: Accepted publickey for core from 10.200.16.10 port 44200 ssh2: RSA SHA256:VL8LvbxVNxa7jmY6OervfMBnEuOtBvTKJ3L6x/+vjOM Dec 13 14:33:36.363000 audit[6123]: CRED_ACQ pid=6123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:36.364484 sshd[6123]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 14:33:36.363000 audit[6123]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd75a14640 a2=3 a3=0 items=0 ppid=1 pid=6123 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:36.363000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 14:33:36.371609 systemd-logind[1404]: New session 10 of user core. Dec 13 14:33:36.372763 systemd[1]: Started session-10.scope. Dec 13 14:33:36.377000 audit[6123]: USER_START pid=6123 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:36.378000 audit[6125]: CRED_ACQ pid=6125 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:36.931070 sshd[6123]: pam_unix(sshd:session): session closed for user core Dec 13 14:33:36.932000 audit[6123]: USER_END pid=6123 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:36.935753 systemd[1]: sshd@7-10.200.8.24:22-10.200.16.10:44200.service: Deactivated successfully. Dec 13 14:33:36.938199 kernel: kauditd_printk_skb: 16 callbacks suppressed Dec 13 14:33:36.938241 kernel: audit: type=1106 audit(1734100416.932:1606): pid=6123 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:36.936804 systemd[1]: session-10.scope: Deactivated successfully. Dec 13 14:33:36.938636 systemd-logind[1404]: Session 10 logged out. Waiting for processes to exit. Dec 13 14:33:36.939736 systemd-logind[1404]: Removed session 10. Dec 13 14:33:36.932000 audit[6123]: CRED_DISP pid=6123 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:36.973160 kernel: audit: type=1104 audit(1734100416.932:1607): pid=6123 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:36.973293 kernel: audit: type=1131 audit(1734100416.932:1608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.24:22-10.200.16.10:44200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:33:36.932000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.24:22-10.200.16.10:44200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:33:38.259937 systemd[1]: run-containerd-runc-k8s.io-87e3c79048a03cad89047ac1c7b79d134ce0c3a99582c53d6d3d96a2ca9058e6-runc.0F7Wgr.mount: Deactivated successfully. Dec 13 14:33:42.071701 kernel: audit: type=1130 audit(1734100422.052:1609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.24:22-10.200.16.10:58244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:33:42.052000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.24:22-10.200.16.10:58244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:33:42.053306 systemd[1]: Started sshd@8-10.200.8.24:22-10.200.16.10:58244.service. Dec 13 14:33:42.761000 audit[6159]: USER_ACCT pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:42.782754 kernel: audit: type=1101 audit(1734100422.761:1610): pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:42.782811 sshd[6159]: Accepted publickey for core from 10.200.16.10 port 58244 ssh2: RSA SHA256:VL8LvbxVNxa7jmY6OervfMBnEuOtBvTKJ3L6x/+vjOM Dec 13 14:33:42.782000 audit[6159]: CRED_ACQ pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:42.783491 sshd[6159]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 14:33:42.789085 systemd[1]: Started session-11.scope. Dec 13 14:33:42.790402 systemd-logind[1404]: New session 11 of user core. Dec 13 14:33:42.810841 kernel: audit: type=1103 audit(1734100422.782:1611): pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:42.811007 kernel: audit: type=1006 audit(1734100422.782:1612): pid=6159 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Dec 13 14:33:42.811040 kernel: audit: type=1300 audit(1734100422.782:1612): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe4e2f5f00 a2=3 a3=0 items=0 ppid=1 pid=6159 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:42.782000 audit[6159]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe4e2f5f00 a2=3 a3=0 items=0 ppid=1 pid=6159 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:42.834402 kernel: audit: type=1327 audit(1734100422.782:1612): proctitle=737368643A20636F7265205B707269765D Dec 13 14:33:42.782000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 14:33:42.795000 audit[6159]: USER_START pid=6159 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:42.853717 kernel: audit: type=1105 audit(1734100422.795:1613): pid=6159 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:42.853887 kernel: audit: type=1103 audit(1734100422.798:1614): pid=6161 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:42.798000 audit[6161]: CRED_ACQ pid=6161 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:43.321329 sshd[6159]: pam_unix(sshd:session): session closed for user core Dec 13 14:33:43.322000 audit[6159]: USER_END pid=6159 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:43.324905 systemd[1]: sshd@8-10.200.8.24:22-10.200.16.10:58244.service: Deactivated successfully. Dec 13 14:33:43.325718 systemd[1]: session-11.scope: Deactivated successfully. Dec 13 14:33:43.327357 systemd-logind[1404]: Session 11 logged out. Waiting for processes to exit. Dec 13 14:33:43.328300 systemd-logind[1404]: Removed session 11. Dec 13 14:33:43.322000 audit[6159]: CRED_DISP pid=6159 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:43.344570 kernel: audit: type=1106 audit(1734100423.322:1615): pid=6159 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:43.344620 kernel: audit: type=1104 audit(1734100423.322:1616): pid=6159 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:43.322000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.24:22-10.200.16.10:58244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:33:48.441422 systemd[1]: Started sshd@9-10.200.8.24:22-10.200.16.10:58254.service. Dec 13 14:33:48.462489 kernel: kauditd_printk_skb: 1 callbacks suppressed Dec 13 14:33:48.462650 kernel: audit: type=1130 audit(1734100428.441:1618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.24:22-10.200.16.10:58254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:33:48.441000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.24:22-10.200.16.10:58254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:33:49.150000 audit[6172]: USER_ACCT pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:49.151490 sshd[6172]: Accepted publickey for core from 10.200.16.10 port 58254 ssh2: RSA SHA256:VL8LvbxVNxa7jmY6OervfMBnEuOtBvTKJ3L6x/+vjOM Dec 13 14:33:49.171572 kernel: audit: type=1101 audit(1734100429.150:1619): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:49.170000 audit[6172]: CRED_ACQ pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:49.172079 sshd[6172]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 14:33:49.184807 systemd[1]: Started session-12.scope. Dec 13 14:33:49.186432 systemd-logind[1404]: New session 12 of user core. Dec 13 14:33:49.190913 kernel: audit: type=1103 audit(1734100429.170:1620): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:49.170000 audit[6172]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe03f12840 a2=3 a3=0 items=0 ppid=1 pid=6172 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:49.217792 kernel: audit: type=1006 audit(1734100429.170:1621): pid=6172 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Dec 13 14:33:49.217948 kernel: audit: type=1300 audit(1734100429.170:1621): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe03f12840 a2=3 a3=0 items=0 ppid=1 pid=6172 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:49.217976 kernel: audit: type=1327 audit(1734100429.170:1621): proctitle=737368643A20636F7265205B707269765D Dec 13 14:33:49.170000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 14:33:49.193000 audit[6172]: USER_START pid=6172 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:49.242460 kernel: audit: type=1105 audit(1734100429.193:1622): pid=6172 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:49.242641 kernel: audit: type=1103 audit(1734100429.195:1623): pid=6174 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:49.195000 audit[6174]: CRED_ACQ pid=6174 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:49.710646 sshd[6172]: pam_unix(sshd:session): session closed for user core Dec 13 14:33:49.711000 audit[6172]: USER_END pid=6172 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:49.713887 systemd[1]: sshd@9-10.200.8.24:22-10.200.16.10:58254.service: Deactivated successfully. Dec 13 14:33:49.714719 systemd[1]: session-12.scope: Deactivated successfully. Dec 13 14:33:49.716452 systemd-logind[1404]: Session 12 logged out. Waiting for processes to exit. Dec 13 14:33:49.717456 systemd-logind[1404]: Removed session 12. Dec 13 14:33:49.711000 audit[6172]: CRED_DISP pid=6172 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:49.732565 kernel: audit: type=1106 audit(1734100429.711:1624): pid=6172 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:49.732608 kernel: audit: type=1104 audit(1734100429.711:1625): pid=6172 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:49.713000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.24:22-10.200.16.10:58254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:33:49.829000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.24:22-10.200.16.10:42070 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:33:49.829741 systemd[1]: Started sshd@10-10.200.8.24:22-10.200.16.10:42070.service. Dec 13 14:33:50.536000 audit[6185]: USER_ACCT pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:50.537422 sshd[6185]: Accepted publickey for core from 10.200.16.10 port 42070 ssh2: RSA SHA256:VL8LvbxVNxa7jmY6OervfMBnEuOtBvTKJ3L6x/+vjOM Dec 13 14:33:50.538000 audit[6185]: CRED_ACQ pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:50.538000 audit[6185]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe6fe5cb50 a2=3 a3=0 items=0 ppid=1 pid=6185 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:50.538000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 14:33:50.539403 sshd[6185]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 14:33:50.545002 systemd-logind[1404]: New session 13 of user core. Dec 13 14:33:50.545590 systemd[1]: Started session-13.scope. Dec 13 14:33:50.550000 audit[6185]: USER_START pid=6185 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:50.552000 audit[6195]: CRED_ACQ pid=6195 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:51.135072 sshd[6185]: pam_unix(sshd:session): session closed for user core Dec 13 14:33:51.136000 audit[6185]: USER_END pid=6185 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:51.136000 audit[6185]: CRED_DISP pid=6185 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:51.138686 systemd[1]: sshd@10-10.200.8.24:22-10.200.16.10:42070.service: Deactivated successfully. Dec 13 14:33:51.138000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.24:22-10.200.16.10:42070 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:33:51.140310 systemd[1]: session-13.scope: Deactivated successfully. Dec 13 14:33:51.140361 systemd-logind[1404]: Session 13 logged out. Waiting for processes to exit. Dec 13 14:33:51.141765 systemd-logind[1404]: Removed session 13. Dec 13 14:33:51.272307 systemd[1]: Started sshd@11-10.200.8.24:22-10.200.16.10:42076.service. Dec 13 14:33:51.272000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.24:22-10.200.16.10:42076 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:33:51.978000 audit[6203]: USER_ACCT pid=6203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:51.979152 sshd[6203]: Accepted publickey for core from 10.200.16.10 port 42076 ssh2: RSA SHA256:VL8LvbxVNxa7jmY6OervfMBnEuOtBvTKJ3L6x/+vjOM Dec 13 14:33:51.979000 audit[6203]: CRED_ACQ pid=6203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:51.979000 audit[6203]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff1223cb00 a2=3 a3=0 items=0 ppid=1 pid=6203 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:51.979000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 14:33:51.980811 sshd[6203]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 14:33:51.985848 systemd-logind[1404]: New session 14 of user core. Dec 13 14:33:51.986361 systemd[1]: Started session-14.scope. Dec 13 14:33:51.990000 audit[6203]: USER_START pid=6203 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:51.992000 audit[6205]: CRED_ACQ pid=6205 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:52.541822 sshd[6203]: pam_unix(sshd:session): session closed for user core Dec 13 14:33:52.542000 audit[6203]: USER_END pid=6203 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:52.543000 audit[6203]: CRED_DISP pid=6203 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:52.545707 systemd[1]: sshd@11-10.200.8.24:22-10.200.16.10:42076.service: Deactivated successfully. Dec 13 14:33:52.545000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.24:22-10.200.16.10:42076 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:33:52.546853 systemd[1]: session-14.scope: Deactivated successfully. Dec 13 14:33:52.547532 systemd-logind[1404]: Session 14 logged out. Waiting for processes to exit. Dec 13 14:33:52.548438 systemd-logind[1404]: Removed session 14. Dec 13 14:33:57.666221 systemd[1]: Started sshd@12-10.200.8.24:22-10.200.16.10:42080.service. Dec 13 14:33:57.666000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.24:22-10.200.16.10:42080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:33:57.677586 kernel: kauditd_printk_skb: 23 callbacks suppressed Dec 13 14:33:57.677688 kernel: audit: type=1130 audit(1734100437.666:1645): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.24:22-10.200.16.10:42080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:33:58.375000 audit[6215]: USER_ACCT pid=6215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:58.376190 sshd[6215]: Accepted publickey for core from 10.200.16.10 port 42080 ssh2: RSA SHA256:VL8LvbxVNxa7jmY6OervfMBnEuOtBvTKJ3L6x/+vjOM Dec 13 14:33:58.395572 kernel: audit: type=1101 audit(1734100438.375:1646): pid=6215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:58.395000 audit[6215]: CRED_ACQ pid=6215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:58.396521 sshd[6215]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 14:33:58.401788 systemd[1]: Started session-15.scope. Dec 13 14:33:58.402820 systemd-logind[1404]: New session 15 of user core. Dec 13 14:33:58.413565 kernel: audit: type=1103 audit(1734100438.395:1647): pid=6215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:58.413669 kernel: audit: type=1006 audit(1734100438.395:1648): pid=6215 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Dec 13 14:33:58.395000 audit[6215]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd19872d50 a2=3 a3=0 items=0 ppid=1 pid=6215 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:58.441015 kernel: audit: type=1300 audit(1734100438.395:1648): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd19872d50 a2=3 a3=0 items=0 ppid=1 pid=6215 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:33:58.395000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 14:33:58.447667 kernel: audit: type=1327 audit(1734100438.395:1648): proctitle=737368643A20636F7265205B707269765D Dec 13 14:33:58.447789 kernel: audit: type=1105 audit(1734100438.408:1649): pid=6215 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:58.408000 audit[6215]: USER_START pid=6215 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:58.410000 audit[6221]: CRED_ACQ pid=6221 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:58.482518 kernel: audit: type=1103 audit(1734100438.410:1650): pid=6221 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:58.938486 sshd[6215]: pam_unix(sshd:session): session closed for user core Dec 13 14:33:58.939000 audit[6215]: USER_END pid=6215 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:58.942034 systemd[1]: sshd@12-10.200.8.24:22-10.200.16.10:42080.service: Deactivated successfully. Dec 13 14:33:58.942921 systemd[1]: session-15.scope: Deactivated successfully. Dec 13 14:33:58.944587 systemd-logind[1404]: Session 15 logged out. Waiting for processes to exit. Dec 13 14:33:58.945695 systemd-logind[1404]: Removed session 15. Dec 13 14:33:58.939000 audit[6215]: CRED_DISP pid=6215 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:58.959732 kernel: audit: type=1106 audit(1734100438.939:1651): pid=6215 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:58.959771 kernel: audit: type=1104 audit(1734100438.939:1652): pid=6215 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:33:58.939000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.24:22-10.200.16.10:42080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:04.059290 systemd[1]: Started sshd@13-10.200.8.24:22-10.200.16.10:55188.service. Dec 13 14:34:04.059000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.24:22-10.200.16.10:55188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:04.066409 kernel: kauditd_printk_skb: 1 callbacks suppressed Dec 13 14:34:04.066453 kernel: audit: type=1130 audit(1734100444.059:1654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.24:22-10.200.16.10:55188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:04.767000 audit[6231]: USER_ACCT pid=6231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:04.768066 sshd[6231]: Accepted publickey for core from 10.200.16.10 port 55188 ssh2: RSA SHA256:VL8LvbxVNxa7jmY6OervfMBnEuOtBvTKJ3L6x/+vjOM Dec 13 14:34:04.785000 audit[6231]: CRED_ACQ pid=6231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:04.787088 sshd[6231]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 14:34:04.792205 systemd[1]: Started session-16.scope. Dec 13 14:34:04.793251 systemd-logind[1404]: New session 16 of user core. Dec 13 14:34:04.805290 kernel: audit: type=1101 audit(1734100444.767:1655): pid=6231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:04.805397 kernel: audit: type=1103 audit(1734100444.785:1656): pid=6231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:04.805425 kernel: audit: type=1006 audit(1734100444.786:1657): pid=6231 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Dec 13 14:34:04.818573 kernel: audit: type=1300 audit(1734100444.786:1657): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc34a19a30 a2=3 a3=0 items=0 ppid=1 pid=6231 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:34:04.786000 audit[6231]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc34a19a30 a2=3 a3=0 items=0 ppid=1 pid=6231 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:34:04.786000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 14:34:04.802000 audit[6231]: USER_START pid=6231 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:04.860648 kernel: audit: type=1327 audit(1734100444.786:1657): proctitle=737368643A20636F7265205B707269765D Dec 13 14:34:04.860817 kernel: audit: type=1105 audit(1734100444.802:1658): pid=6231 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:04.860845 kernel: audit: type=1103 audit(1734100444.804:1659): pid=6233 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:04.804000 audit[6233]: CRED_ACQ pid=6233 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:05.242393 systemd[1]: run-containerd-runc-k8s.io-07e4121dc409a349dfcdcf13633abee092d5959b01005f2640ad07f186dda800-runc.25YXkV.mount: Deactivated successfully. Dec 13 14:34:05.337925 sshd[6231]: pam_unix(sshd:session): session closed for user core Dec 13 14:34:05.338000 audit[6231]: USER_END pid=6231 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:05.340874 systemd[1]: sshd@13-10.200.8.24:22-10.200.16.10:55188.service: Deactivated successfully. Dec 13 14:34:05.341795 systemd[1]: session-16.scope: Deactivated successfully. Dec 13 14:34:05.344251 systemd-logind[1404]: Session 16 logged out. Waiting for processes to exit. Dec 13 14:34:05.345290 systemd-logind[1404]: Removed session 16. Dec 13 14:34:05.339000 audit[6231]: CRED_DISP pid=6231 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:05.359573 kernel: audit: type=1106 audit(1734100445.338:1660): pid=6231 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:05.359637 kernel: audit: type=1104 audit(1734100445.339:1661): pid=6231 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:05.339000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.24:22-10.200.16.10:55188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:08.254407 systemd[1]: run-containerd-runc-k8s.io-87e3c79048a03cad89047ac1c7b79d134ce0c3a99582c53d6d3d96a2ca9058e6-runc.Dvf1ro.mount: Deactivated successfully. Dec 13 14:34:10.472339 kernel: kauditd_printk_skb: 1 callbacks suppressed Dec 13 14:34:10.473026 kernel: audit: type=1130 audit(1734100450.458:1663): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.24:22-10.200.16.10:37358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:10.458000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.24:22-10.200.16.10:37358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:10.458941 systemd[1]: Started sshd@14-10.200.8.24:22-10.200.16.10:37358.service. Dec 13 14:34:11.167000 audit[6306]: USER_ACCT pid=6306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:11.168254 sshd[6306]: Accepted publickey for core from 10.200.16.10 port 37358 ssh2: RSA SHA256:VL8LvbxVNxa7jmY6OervfMBnEuOtBvTKJ3L6x/+vjOM Dec 13 14:34:11.187581 kernel: audit: type=1101 audit(1734100451.167:1664): pid=6306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:11.188246 sshd[6306]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 14:34:11.187000 audit[6306]: CRED_ACQ pid=6306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:11.196534 systemd[1]: Started session-17.scope. Dec 13 14:34:11.197506 systemd-logind[1404]: New session 17 of user core. Dec 13 14:34:11.217518 kernel: audit: type=1103 audit(1734100451.187:1665): pid=6306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:11.217656 kernel: audit: type=1006 audit(1734100451.187:1666): pid=6306 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Dec 13 14:34:11.187000 audit[6306]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff2887dbb0 a2=3 a3=0 items=0 ppid=1 pid=6306 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:34:11.235631 kernel: audit: type=1300 audit(1734100451.187:1666): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff2887dbb0 a2=3 a3=0 items=0 ppid=1 pid=6306 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:34:11.235773 kernel: audit: type=1327 audit(1734100451.187:1666): proctitle=737368643A20636F7265205B707269765D Dec 13 14:34:11.187000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 14:34:11.202000 audit[6306]: USER_START pid=6306 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:11.259591 kernel: audit: type=1105 audit(1734100451.202:1667): pid=6306 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:11.206000 audit[6308]: CRED_ACQ pid=6308 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:11.260566 kernel: audit: type=1103 audit(1734100451.206:1668): pid=6308 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:11.725983 sshd[6306]: pam_unix(sshd:session): session closed for user core Dec 13 14:34:11.727000 audit[6306]: USER_END pid=6306 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:11.729847 systemd-logind[1404]: Session 17 logged out. Waiting for processes to exit. Dec 13 14:34:11.731115 systemd[1]: sshd@14-10.200.8.24:22-10.200.16.10:37358.service: Deactivated successfully. Dec 13 14:34:11.731895 systemd[1]: session-17.scope: Deactivated successfully. Dec 13 14:34:11.733266 systemd-logind[1404]: Removed session 17. Dec 13 14:34:11.727000 audit[6306]: CRED_DISP pid=6306 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:11.762511 kernel: audit: type=1106 audit(1734100451.727:1669): pid=6306 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:11.762726 kernel: audit: type=1104 audit(1734100451.727:1670): pid=6306 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:11.730000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.24:22-10.200.16.10:37358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:11.848000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.24:22-10.200.16.10:37362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:11.848342 systemd[1]: Started sshd@15-10.200.8.24:22-10.200.16.10:37362.service. Dec 13 14:34:12.557000 audit[6318]: USER_ACCT pid=6318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:12.558260 sshd[6318]: Accepted publickey for core from 10.200.16.10 port 37362 ssh2: RSA SHA256:VL8LvbxVNxa7jmY6OervfMBnEuOtBvTKJ3L6x/+vjOM Dec 13 14:34:12.558000 audit[6318]: CRED_ACQ pid=6318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:12.558000 audit[6318]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd490b1b60 a2=3 a3=0 items=0 ppid=1 pid=6318 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:34:12.558000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 14:34:12.559770 sshd[6318]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 14:34:12.564928 systemd-logind[1404]: New session 18 of user core. Dec 13 14:34:12.565453 systemd[1]: Started session-18.scope. Dec 13 14:34:12.569000 audit[6318]: USER_START pid=6318 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:12.571000 audit[6320]: CRED_ACQ pid=6320 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:13.186593 sshd[6318]: pam_unix(sshd:session): session closed for user core Dec 13 14:34:13.187000 audit[6318]: USER_END pid=6318 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:13.187000 audit[6318]: CRED_DISP pid=6318 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:13.189523 systemd[1]: sshd@15-10.200.8.24:22-10.200.16.10:37362.service: Deactivated successfully. Dec 13 14:34:13.189000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.24:22-10.200.16.10:37362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:13.190576 systemd[1]: session-18.scope: Deactivated successfully. Dec 13 14:34:13.191244 systemd-logind[1404]: Session 18 logged out. Waiting for processes to exit. Dec 13 14:34:13.192113 systemd-logind[1404]: Removed session 18. Dec 13 14:34:13.305000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.24:22-10.200.16.10:37366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:13.306240 systemd[1]: Started sshd@16-10.200.8.24:22-10.200.16.10:37366.service. Dec 13 14:34:14.014000 audit[6328]: USER_ACCT pid=6328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:14.014941 sshd[6328]: Accepted publickey for core from 10.200.16.10 port 37366 ssh2: RSA SHA256:VL8LvbxVNxa7jmY6OervfMBnEuOtBvTKJ3L6x/+vjOM Dec 13 14:34:14.015000 audit[6328]: CRED_ACQ pid=6328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:14.015000 audit[6328]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd1608ba70 a2=3 a3=0 items=0 ppid=1 pid=6328 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:34:14.015000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 14:34:14.016816 sshd[6328]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 14:34:14.022023 systemd-logind[1404]: New session 19 of user core. Dec 13 14:34:14.022673 systemd[1]: Started session-19.scope. Dec 13 14:34:14.027000 audit[6328]: USER_START pid=6328 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:14.028000 audit[6330]: CRED_ACQ pid=6330 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:16.264000 audit[6340]: NETFILTER_CFG table=filter:133 family=2 entries=20 op=nft_register_rule pid=6340 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:34:16.270689 kernel: kauditd_printk_skb: 20 callbacks suppressed Dec 13 14:34:16.270817 kernel: audit: type=1325 audit(1734100456.264:1687): table=filter:133 family=2 entries=20 op=nft_register_rule pid=6340 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:34:16.264000 audit[6340]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffda3a4f290 a2=0 a3=7ffda3a4f27c items=0 ppid=2614 pid=6340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:34:16.301503 kernel: audit: type=1300 audit(1734100456.264:1687): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffda3a4f290 a2=0 a3=7ffda3a4f27c items=0 ppid=2614 pid=6340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:34:16.264000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:34:16.286000 audit[6340]: NETFILTER_CFG table=nat:134 family=2 entries=22 op=nft_register_rule pid=6340 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:34:16.324354 kernel: audit: type=1327 audit(1734100456.264:1687): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:34:16.324515 kernel: audit: type=1325 audit(1734100456.286:1688): table=nat:134 family=2 entries=22 op=nft_register_rule pid=6340 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:34:16.286000 audit[6340]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffda3a4f290 a2=0 a3=0 items=0 ppid=2614 pid=6340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:34:16.286000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:34:16.355326 kernel: audit: type=1300 audit(1734100456.286:1688): arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffda3a4f290 a2=0 a3=0 items=0 ppid=2614 pid=6340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:34:16.355483 kernel: audit: type=1327 audit(1734100456.286:1688): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:34:16.347000 audit[6342]: NETFILTER_CFG table=filter:135 family=2 entries=32 op=nft_register_rule pid=6342 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:34:16.365863 kernel: audit: type=1325 audit(1734100456.347:1689): table=filter:135 family=2 entries=32 op=nft_register_rule pid=6342 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:34:16.347000 audit[6342]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffe97569e70 a2=0 a3=7ffe97569e5c items=0 ppid=2614 pid=6342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:34:16.385839 kernel: audit: type=1300 audit(1734100456.347:1689): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffe97569e70 a2=0 a3=7ffe97569e5c items=0 ppid=2614 pid=6342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:34:16.347000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:34:16.396382 sshd[6328]: pam_unix(sshd:session): session closed for user core Dec 13 14:34:16.396964 kernel: audit: type=1327 audit(1734100456.347:1689): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:34:16.397000 audit[6328]: USER_END pid=6328 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:16.400322 systemd-logind[1404]: Session 19 logged out. Waiting for processes to exit. Dec 13 14:34:16.401818 systemd[1]: sshd@16-10.200.8.24:22-10.200.16.10:37366.service: Deactivated successfully. Dec 13 14:34:16.402597 systemd[1]: session-19.scope: Deactivated successfully. Dec 13 14:34:16.403777 systemd-logind[1404]: Removed session 19. Dec 13 14:34:16.397000 audit[6328]: CRED_DISP pid=6328 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:16.401000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.24:22-10.200.16.10:37366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:16.404000 audit[6342]: NETFILTER_CFG table=nat:136 family=2 entries=22 op=nft_register_rule pid=6342 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:34:16.404000 audit[6342]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffe97569e70 a2=0 a3=0 items=0 ppid=2614 pid=6342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:34:16.404000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:34:16.417603 kernel: audit: type=1106 audit(1734100456.397:1690): pid=6328 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:16.513000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.8.24:22-10.200.16.10:37368 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:16.513797 systemd[1]: Started sshd@17-10.200.8.24:22-10.200.16.10:37368.service. Dec 13 14:34:17.220000 audit[6345]: USER_ACCT pid=6345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:17.221593 sshd[6345]: Accepted publickey for core from 10.200.16.10 port 37368 ssh2: RSA SHA256:VL8LvbxVNxa7jmY6OervfMBnEuOtBvTKJ3L6x/+vjOM Dec 13 14:34:17.222000 audit[6345]: CRED_ACQ pid=6345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:17.222000 audit[6345]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff34e78390 a2=3 a3=0 items=0 ppid=1 pid=6345 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:34:17.222000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 14:34:17.223398 sshd[6345]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 14:34:17.229194 systemd[1]: Started session-20.scope. Dec 13 14:34:17.229922 systemd-logind[1404]: New session 20 of user core. Dec 13 14:34:17.234000 audit[6345]: USER_START pid=6345 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:17.235000 audit[6347]: CRED_ACQ pid=6347 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:17.879495 sshd[6345]: pam_unix(sshd:session): session closed for user core Dec 13 14:34:17.880000 audit[6345]: USER_END pid=6345 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:17.881000 audit[6345]: CRED_DISP pid=6345 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:17.883297 systemd[1]: sshd@17-10.200.8.24:22-10.200.16.10:37368.service: Deactivated successfully. Dec 13 14:34:17.883000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.8.24:22-10.200.16.10:37368 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:17.884470 systemd[1]: session-20.scope: Deactivated successfully. Dec 13 14:34:17.885279 systemd-logind[1404]: Session 20 logged out. Waiting for processes to exit. Dec 13 14:34:17.886160 systemd-logind[1404]: Removed session 20. Dec 13 14:34:17.998000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.8.24:22-10.200.16.10:37376 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:17.998736 systemd[1]: Started sshd@18-10.200.8.24:22-10.200.16.10:37376.service. Dec 13 14:34:18.707000 audit[6355]: USER_ACCT pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:18.708449 sshd[6355]: Accepted publickey for core from 10.200.16.10 port 37376 ssh2: RSA SHA256:VL8LvbxVNxa7jmY6OervfMBnEuOtBvTKJ3L6x/+vjOM Dec 13 14:34:18.709000 audit[6355]: CRED_ACQ pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:18.709000 audit[6355]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc45353900 a2=3 a3=0 items=0 ppid=1 pid=6355 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:34:18.709000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 14:34:18.710233 sshd[6355]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 14:34:18.715693 systemd[1]: Started session-21.scope. Dec 13 14:34:18.716167 systemd-logind[1404]: New session 21 of user core. Dec 13 14:34:18.720000 audit[6355]: USER_START pid=6355 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:18.722000 audit[6357]: CRED_ACQ pid=6357 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:19.303629 sshd[6355]: pam_unix(sshd:session): session closed for user core Dec 13 14:34:19.304000 audit[6355]: USER_END pid=6355 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:19.304000 audit[6355]: CRED_DISP pid=6355 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:19.307024 systemd-logind[1404]: Session 21 logged out. Waiting for processes to exit. Dec 13 14:34:19.307477 systemd[1]: sshd@18-10.200.8.24:22-10.200.16.10:37376.service: Deactivated successfully. Dec 13 14:34:19.308491 systemd[1]: session-21.scope: Deactivated successfully. Dec 13 14:34:19.307000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.8.24:22-10.200.16.10:37376 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:19.310138 systemd-logind[1404]: Removed session 21. Dec 13 14:34:23.478000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:34:23.485396 kernel: kauditd_printk_skb: 27 callbacks suppressed Dec 13 14:34:23.485493 kernel: audit: type=1400 audit(1734100463.478:1712): avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:34:23.478000 audit[2277]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002712de0 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:34:23.523257 kernel: audit: type=1300 audit(1734100463.478:1712): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002712de0 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:34:23.523367 kernel: audit: type=1327 audit(1734100463.478:1712): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:34:23.478000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:34:23.542899 kernel: audit: type=1400 audit(1734100463.478:1713): avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:34:23.478000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:34:23.478000 audit[2277]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001651780 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:34:23.578570 kernel: audit: type=1300 audit(1734100463.478:1713): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001651780 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:34:23.478000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:34:23.597568 kernel: audit: type=1327 audit(1734100463.478:1713): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:34:23.766000 audit[2312]: AVC avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:34:23.766000 audit[2312]: AVC avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:34:23.801972 kernel: audit: type=1400 audit(1734100463.766:1714): avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:34:23.802119 kernel: audit: type=1400 audit(1734100463.766:1715): avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:34:23.802148 kernel: audit: type=1300 audit(1734100463.766:1715): arch=c000003e syscall=254 success=no exit=-13 a0=7a a1=c005ee2090 a2=fc6 a3=0 items=0 ppid=2160 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 key=(null) Dec 13 14:34:23.766000 audit[2312]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7a a1=c005ee2090 a2=fc6 a3=0 items=0 ppid=2160 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 key=(null) Dec 13 14:34:23.766000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Dec 13 14:34:23.843579 kernel: audit: type=1327 audit(1734100463.766:1715): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Dec 13 14:34:23.781000 audit[2312]: AVC avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:34:23.781000 audit[2312]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7a a1=c00f640ff0 a2=fc6 a3=0 items=0 ppid=2160 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 key=(null) Dec 13 14:34:23.781000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Dec 13 14:34:23.781000 audit[2312]: AVC avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:34:23.781000 audit[2312]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7b a1=c00f641020 a2=fc6 a3=0 items=0 ppid=2160 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 key=(null) Dec 13 14:34:23.781000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Dec 13 14:34:23.781000 audit[2312]: AVC avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7362 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:34:23.781000 audit[2312]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7b a1=c00f641320 a2=fc6 a3=0 items=0 ppid=2160 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 key=(null) Dec 13 14:34:23.781000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Dec 13 14:34:23.781000 audit[2312]: AVC avc: denied { watch } for pid=2312 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:34:23.781000 audit[2312]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7b a1=c004651ca0 a2=fc6 a3=0 items=0 ppid=2160 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 key=(null) Dec 13 14:34:23.781000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Dec 13 14:34:23.766000 audit[2312]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c004500e60 a2=fc6 a3=0 items=0 ppid=2160 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c184,c861 key=(null) Dec 13 14:34:23.766000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Dec 13 14:34:24.422000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.24:22-10.200.16.10:40016 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:24.423285 systemd[1]: Started sshd@19-10.200.8.24:22-10.200.16.10:40016.service. Dec 13 14:34:25.151000 audit[6366]: USER_ACCT pid=6366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:25.153468 sshd[6366]: Accepted publickey for core from 10.200.16.10 port 40016 ssh2: RSA SHA256:VL8LvbxVNxa7jmY6OervfMBnEuOtBvTKJ3L6x/+vjOM Dec 13 14:34:25.152000 audit[6366]: CRED_ACQ pid=6366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:25.153000 audit[6366]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe2438a5d0 a2=3 a3=0 items=0 ppid=1 pid=6366 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:34:25.153000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 14:34:25.154994 sshd[6366]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 14:34:25.160050 systemd[1]: Started session-22.scope. Dec 13 14:34:25.160683 systemd-logind[1404]: New session 22 of user core. Dec 13 14:34:25.164000 audit[6366]: USER_START pid=6366 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:25.165000 audit[6368]: CRED_ACQ pid=6368 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:25.722470 sshd[6366]: pam_unix(sshd:session): session closed for user core Dec 13 14:34:25.722000 audit[6366]: USER_END pid=6366 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:25.723000 audit[6366]: CRED_DISP pid=6366 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:25.726163 systemd[1]: sshd@19-10.200.8.24:22-10.200.16.10:40016.service: Deactivated successfully. Dec 13 14:34:25.727176 systemd[1]: session-22.scope: Deactivated successfully. Dec 13 14:34:25.724000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.24:22-10.200.16.10:40016 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:25.728140 systemd-logind[1404]: Session 22 logged out. Waiting for processes to exit. Dec 13 14:34:25.729475 systemd-logind[1404]: Removed session 22. Dec 13 14:34:26.916000 audit[6379]: NETFILTER_CFG table=filter:137 family=2 entries=20 op=nft_register_rule pid=6379 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:34:26.916000 audit[6379]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd2d2a9dc0 a2=0 a3=7ffd2d2a9dac items=0 ppid=2614 pid=6379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:34:26.916000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:34:26.922000 audit[6379]: NETFILTER_CFG table=nat:138 family=2 entries=106 op=nft_register_chain pid=6379 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 14:34:26.922000 audit[6379]: SYSCALL arch=c000003e syscall=46 success=yes exit=49452 a0=3 a1=7ffd2d2a9dc0 a2=0 a3=7ffd2d2a9dac items=0 ppid=2614 pid=6379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:34:26.922000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 14:34:30.842835 systemd[1]: Started sshd@20-10.200.8.24:22-10.200.16.10:54416.service. Dec 13 14:34:30.867186 kernel: kauditd_printk_skb: 31 callbacks suppressed Dec 13 14:34:30.867260 kernel: audit: type=1130 audit(1734100470.841:1731): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.24:22-10.200.16.10:54416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:30.841000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.24:22-10.200.16.10:54416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:31.550000 audit[6392]: USER_ACCT pid=6392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:31.552325 sshd[6392]: Accepted publickey for core from 10.200.16.10 port 54416 ssh2: RSA SHA256:VL8LvbxVNxa7jmY6OervfMBnEuOtBvTKJ3L6x/+vjOM Dec 13 14:34:31.571582 kernel: audit: type=1101 audit(1734100471.550:1732): pid=6392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:31.570000 audit[6392]: CRED_ACQ pid=6392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:31.572478 sshd[6392]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 14:34:31.583868 systemd[1]: Started session-23.scope. Dec 13 14:34:31.585302 systemd-logind[1404]: New session 23 of user core. Dec 13 14:34:31.592224 kernel: audit: type=1103 audit(1734100471.570:1733): pid=6392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:31.570000 audit[6392]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff0440fc20 a2=3 a3=0 items=0 ppid=1 pid=6392 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:34:31.622764 kernel: audit: type=1006 audit(1734100471.570:1734): pid=6392 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Dec 13 14:34:31.622960 kernel: audit: type=1300 audit(1734100471.570:1734): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff0440fc20 a2=3 a3=0 items=0 ppid=1 pid=6392 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:34:31.570000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 14:34:31.629341 kernel: audit: type=1327 audit(1734100471.570:1734): proctitle=737368643A20636F7265205B707269765D Dec 13 14:34:31.629479 kernel: audit: type=1105 audit(1734100471.590:1735): pid=6392 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:31.590000 audit[6392]: USER_START pid=6392 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:31.592000 audit[6397]: CRED_ACQ pid=6397 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:31.663645 kernel: audit: type=1103 audit(1734100471.592:1736): pid=6397 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:31.663794 kernel: audit: type=1400 audit(1734100471.596:1737): avc: denied { watch } for pid=4500 comm="apiserver" path="/calico-apiserver-certs/..2024_12_13_14_32_10.2141185995/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c566,c1022 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c566,c1022 tclass=file permissive=0 Dec 13 14:34:31.596000 audit[4500]: AVC avc: denied { watch } for pid=4500 comm="apiserver" path="/calico-apiserver-certs/..2024_12_13_14_32_10.2141185995/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c566,c1022 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c566,c1022 tclass=file permissive=0 Dec 13 14:34:31.596000 audit[4500]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0015689a0 a2=fc6 a3=0 items=0 ppid=3998 pid=4500 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c566,c1022 key=(null) Dec 13 14:34:31.596000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Dec 13 14:34:31.705571 kernel: audit: type=1300 audit(1734100471.596:1737): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0015689a0 a2=fc6 a3=0 items=0 ppid=3998 pid=4500 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c566,c1022 key=(null) Dec 13 14:34:31.863000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:34:31.863000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:34:31.863000 audit[2277]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001651de0 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:34:31.863000 audit[2277]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001cc0140 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:34:31.863000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:34:31.863000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:34:31.864000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:34:31.864000 audit[2277]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001651e00 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:34:31.864000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:34:31.869000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7354 scontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 14:34:31.869000 audit[2277]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001cc03c0 a2=fc6 a3=0 items=0 ppid=2139 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c33,c853 key=(null) Dec 13 14:34:31.869000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 14:34:32.114209 sshd[6392]: pam_unix(sshd:session): session closed for user core Dec 13 14:34:32.114000 audit[6392]: USER_END pid=6392 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:32.114000 audit[6392]: CRED_DISP pid=6392 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:32.115000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.24:22-10.200.16.10:54416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:32.117055 systemd[1]: sshd@20-10.200.8.24:22-10.200.16.10:54416.service: Deactivated successfully. Dec 13 14:34:32.119021 systemd[1]: session-23.scope: Deactivated successfully. Dec 13 14:34:32.119063 systemd-logind[1404]: Session 23 logged out. Waiting for processes to exit. Dec 13 14:34:32.120378 systemd-logind[1404]: Removed session 23. Dec 13 14:34:35.239415 systemd[1]: run-containerd-runc-k8s.io-07e4121dc409a349dfcdcf13633abee092d5959b01005f2640ad07f186dda800-runc.95thYK.mount: Deactivated successfully. Dec 13 14:34:35.246000 audit[4609]: AVC avc: denied { watch } for pid=4609 comm="apiserver" path="/calico-apiserver-certs/..2024_12_13_14_32_10.647068444/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c174,c671 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c174,c671 tclass=file permissive=0 Dec 13 14:34:35.246000 audit[4609]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0021f2920 a2=fc6 a3=0 items=0 ppid=4224 pid=4609 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c174,c671 key=(null) Dec 13 14:34:35.246000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Dec 13 14:34:37.233000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.24:22-10.200.16.10:54428 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:37.234770 systemd[1]: Started sshd@21-10.200.8.24:22-10.200.16.10:54428.service. Dec 13 14:34:37.246105 kernel: kauditd_printk_skb: 19 callbacks suppressed Dec 13 14:34:37.246216 kernel: audit: type=1130 audit(1734100477.233:1746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.24:22-10.200.16.10:54428 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:37.942000 audit[6430]: USER_ACCT pid=6430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:37.946261 sshd[6430]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 14:34:37.963955 kernel: audit: type=1101 audit(1734100477.942:1747): pid=6430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:37.964005 sshd[6430]: Accepted publickey for core from 10.200.16.10 port 54428 ssh2: RSA SHA256:VL8LvbxVNxa7jmY6OervfMBnEuOtBvTKJ3L6x/+vjOM Dec 13 14:34:37.944000 audit[6430]: CRED_ACQ pid=6430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:37.969756 systemd[1]: Started session-24.scope. Dec 13 14:34:37.971020 systemd-logind[1404]: New session 24 of user core. Dec 13 14:34:37.992297 kernel: audit: type=1103 audit(1734100477.944:1748): pid=6430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:37.992516 kernel: audit: type=1006 audit(1734100477.944:1749): pid=6430 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Dec 13 14:34:37.992603 kernel: audit: type=1300 audit(1734100477.944:1749): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe3c565140 a2=3 a3=0 items=0 ppid=1 pid=6430 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:34:37.944000 audit[6430]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe3c565140 a2=3 a3=0 items=0 ppid=1 pid=6430 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:34:37.944000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 14:34:38.010582 kernel: audit: type=1327 audit(1734100477.944:1749): proctitle=737368643A20636F7265205B707269765D Dec 13 14:34:37.974000 audit[6430]: USER_START pid=6430 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:38.035588 kernel: audit: type=1105 audit(1734100477.974:1750): pid=6430 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:37.977000 audit[6432]: CRED_ACQ pid=6432 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:38.051425 kernel: audit: type=1103 audit(1734100477.977:1751): pid=6432 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:38.260170 systemd[1]: run-containerd-runc-k8s.io-87e3c79048a03cad89047ac1c7b79d134ce0c3a99582c53d6d3d96a2ca9058e6-runc.9C7lIc.mount: Deactivated successfully. Dec 13 14:34:38.500348 sshd[6430]: pam_unix(sshd:session): session closed for user core Dec 13 14:34:38.500000 audit[6430]: USER_END pid=6430 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:38.503943 systemd[1]: sshd@21-10.200.8.24:22-10.200.16.10:54428.service: Deactivated successfully. Dec 13 14:34:38.504750 systemd[1]: session-24.scope: Deactivated successfully. Dec 13 14:34:38.506274 systemd-logind[1404]: Session 24 logged out. Waiting for processes to exit. Dec 13 14:34:38.507204 systemd-logind[1404]: Removed session 24. Dec 13 14:34:38.500000 audit[6430]: CRED_DISP pid=6430 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:38.539175 kernel: audit: type=1106 audit(1734100478.500:1752): pid=6430 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:38.539353 kernel: audit: type=1104 audit(1734100478.500:1753): pid=6430 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:38.502000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.24:22-10.200.16.10:54428 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:43.619000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.24:22-10.200.16.10:54886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:43.620592 systemd[1]: Started sshd@22-10.200.8.24:22-10.200.16.10:54886.service. Dec 13 14:34:43.625928 kernel: kauditd_printk_skb: 1 callbacks suppressed Dec 13 14:34:43.626037 kernel: audit: type=1130 audit(1734100483.619:1755): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.24:22-10.200.16.10:54886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:44.330000 audit[6469]: USER_ACCT pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:44.332465 sshd[6469]: Accepted publickey for core from 10.200.16.10 port 54886 ssh2: RSA SHA256:VL8LvbxVNxa7jmY6OervfMBnEuOtBvTKJ3L6x/+vjOM Dec 13 14:34:44.350587 kernel: audit: type=1101 audit(1734100484.330:1756): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:44.351413 sshd[6469]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 14:34:44.349000 audit[6469]: CRED_ACQ pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:44.357294 systemd[1]: Started session-25.scope. Dec 13 14:34:44.358303 systemd-logind[1404]: New session 25 of user core. Dec 13 14:34:44.368704 kernel: audit: type=1103 audit(1734100484.349:1757): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:44.368821 kernel: audit: type=1006 audit(1734100484.349:1758): pid=6469 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Dec 13 14:34:44.349000 audit[6469]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff16bf9740 a2=3 a3=0 items=0 ppid=1 pid=6469 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:34:44.379719 kernel: audit: type=1300 audit(1734100484.349:1758): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff16bf9740 a2=3 a3=0 items=0 ppid=1 pid=6469 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:34:44.349000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 14:34:44.397624 kernel: audit: type=1327 audit(1734100484.349:1758): proctitle=737368643A20636F7265205B707269765D Dec 13 14:34:44.362000 audit[6469]: USER_START pid=6469 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:44.403573 kernel: audit: type=1105 audit(1734100484.362:1759): pid=6469 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:44.364000 audit[6471]: CRED_ACQ pid=6471 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:44.436615 kernel: audit: type=1103 audit(1734100484.364:1760): pid=6471 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:44.890484 sshd[6469]: pam_unix(sshd:session): session closed for user core Dec 13 14:34:44.890000 audit[6469]: USER_END pid=6469 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:44.894200 systemd-logind[1404]: Session 25 logged out. Waiting for processes to exit. Dec 13 14:34:44.895825 systemd[1]: sshd@22-10.200.8.24:22-10.200.16.10:54886.service: Deactivated successfully. Dec 13 14:34:44.896625 systemd[1]: session-25.scope: Deactivated successfully. Dec 13 14:34:44.898134 systemd-logind[1404]: Removed session 25. Dec 13 14:34:44.890000 audit[6469]: CRED_DISP pid=6469 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:44.912565 kernel: audit: type=1106 audit(1734100484.890:1761): pid=6469 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:44.912624 kernel: audit: type=1104 audit(1734100484.890:1762): pid=6469 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:44.894000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.24:22-10.200.16.10:54886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:50.015284 systemd[1]: Started sshd@23-10.200.8.24:22-10.200.16.10:56190.service. Dec 13 14:34:50.014000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.24:22-10.200.16.10:56190 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:50.031784 kernel: kauditd_printk_skb: 1 callbacks suppressed Dec 13 14:34:50.031942 kernel: audit: type=1130 audit(1734100490.014:1764): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.24:22-10.200.16.10:56190 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:50.726226 sshd[6492]: Accepted publickey for core from 10.200.16.10 port 56190 ssh2: RSA SHA256:VL8LvbxVNxa7jmY6OervfMBnEuOtBvTKJ3L6x/+vjOM Dec 13 14:34:50.724000 audit[6492]: USER_ACCT pid=6492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:50.732359 sshd[6492]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 14:34:50.747799 kernel: audit: type=1101 audit(1734100490.724:1765): pid=6492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:50.726000 audit[6492]: CRED_ACQ pid=6492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:50.765497 systemd[1]: Started session-26.scope. Dec 13 14:34:50.766614 systemd-logind[1404]: New session 26 of user core. Dec 13 14:34:50.778268 kernel: audit: type=1103 audit(1734100490.726:1766): pid=6492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:50.778426 kernel: audit: type=1006 audit(1734100490.726:1767): pid=6492 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Dec 13 14:34:50.726000 audit[6492]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe49ffe820 a2=3 a3=0 items=0 ppid=1 pid=6492 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:34:50.801580 kernel: audit: type=1300 audit(1734100490.726:1767): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe49ffe820 a2=3 a3=0 items=0 ppid=1 pid=6492 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:34:50.801735 kernel: audit: type=1327 audit(1734100490.726:1767): proctitle=737368643A20636F7265205B707269765D Dec 13 14:34:50.726000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 14:34:50.770000 audit[6492]: USER_START pid=6492 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:50.823960 kernel: audit: type=1105 audit(1734100490.770:1768): pid=6492 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:50.779000 audit[6494]: CRED_ACQ pid=6494 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:50.824579 kernel: audit: type=1103 audit(1734100490.779:1769): pid=6494 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:51.304162 sshd[6492]: pam_unix(sshd:session): session closed for user core Dec 13 14:34:51.304000 audit[6492]: USER_END pid=6492 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:51.307100 systemd[1]: sshd@23-10.200.8.24:22-10.200.16.10:56190.service: Deactivated successfully. Dec 13 14:34:51.308589 systemd[1]: session-26.scope: Deactivated successfully. Dec 13 14:34:51.316315 systemd-logind[1404]: Session 26 logged out. Waiting for processes to exit. Dec 13 14:34:51.317452 systemd-logind[1404]: Removed session 26. Dec 13 14:34:51.304000 audit[6492]: CRED_DISP pid=6492 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:51.342511 kernel: audit: type=1106 audit(1734100491.304:1770): pid=6492 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:51.342705 kernel: audit: type=1104 audit(1734100491.304:1771): pid=6492 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:51.305000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.24:22-10.200.16.10:56190 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:56.422000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.24:22-10.200.16.10:56204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:56.424240 systemd[1]: Started sshd@24-10.200.8.24:22-10.200.16.10:56204.service. Dec 13 14:34:56.429351 kernel: kauditd_printk_skb: 1 callbacks suppressed Dec 13 14:34:56.429453 kernel: audit: type=1130 audit(1734100496.422:1773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.24:22-10.200.16.10:56204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 14:34:57.130000 audit[6505]: USER_ACCT pid=6505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:57.133486 sshd[6505]: Accepted publickey for core from 10.200.16.10 port 56204 ssh2: RSA SHA256:VL8LvbxVNxa7jmY6OervfMBnEuOtBvTKJ3L6x/+vjOM Dec 13 14:34:57.151000 audit[6505]: CRED_ACQ pid=6505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:57.152919 sshd[6505]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 14:34:57.164653 systemd[1]: Started session-27.scope. Dec 13 14:34:57.166351 systemd-logind[1404]: New session 27 of user core. Dec 13 14:34:57.170566 kernel: audit: type=1101 audit(1734100497.130:1774): pid=6505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:57.170679 kernel: audit: type=1103 audit(1734100497.151:1775): pid=6505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:57.151000 audit[6505]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe697cf60 a2=3 a3=0 items=0 ppid=1 pid=6505 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:34:57.198804 kernel: audit: type=1006 audit(1734100497.151:1776): pid=6505 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Dec 13 14:34:57.199055 kernel: audit: type=1300 audit(1734100497.151:1776): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe697cf60 a2=3 a3=0 items=0 ppid=1 pid=6505 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 14:34:57.205555 kernel: audit: type=1327 audit(1734100497.151:1776): proctitle=737368643A20636F7265205B707269765D Dec 13 14:34:57.205673 kernel: audit: type=1105 audit(1734100497.169:1777): pid=6505 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:57.151000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 14:34:57.169000 audit[6505]: USER_START pid=6505 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:57.169000 audit[6507]: CRED_ACQ pid=6507 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:57.224567 kernel: audit: type=1103 audit(1734100497.169:1778): pid=6507 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:57.687448 sshd[6505]: pam_unix(sshd:session): session closed for user core Dec 13 14:34:57.687000 audit[6505]: USER_END pid=6505 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:57.690819 systemd[1]: sshd@24-10.200.8.24:22-10.200.16.10:56204.service: Deactivated successfully. Dec 13 14:34:57.691768 systemd[1]: session-27.scope: Deactivated successfully. Dec 13 14:34:57.693746 systemd-logind[1404]: Session 27 logged out. Waiting for processes to exit. Dec 13 14:34:57.694740 systemd-logind[1404]: Removed session 27. Dec 13 14:34:57.687000 audit[6505]: CRED_DISP pid=6505 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:57.710582 kernel: audit: type=1106 audit(1734100497.687:1779): pid=6505 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:57.710664 kernel: audit: type=1104 audit(1734100497.687:1780): pid=6505 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Dec 13 14:34:57.687000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.24:22-10.200.16.10:56204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'